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from  build  to  buy,  from 
high-touch  to  high-tech. 
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BY  MERIDITH  LEVINSON 


CIO  Bob  DeRodes 
didn't  think 
Home  Depot’s  old 
IT  infrastructure 
could  support  the 
company's  growth. 
So  he's  building 
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“I.T.  DEPARTMENT? 
YOU’RE  LOOKING  AT  IT.” 


ibm.com/ondemand 


That’s  the  trouble  with  being  a  mid-sized  company.  You’ve  got  all  the 
big-business  problems,  but  none  of  the  resources.  So  how  do  you 
compete?  You  outmaneuver.  You  outthink.  You  integrate  suppliers, 
employees  and  customers.  You  become  an  on  demand  business. 

INTEGRATE?  SURE.  RIGHT  AFTER  I  SOLVE  COLD  FUSION.” 

And  that’s  where  we  come  in.  IBM  and  over  95,000  Business 
Partners.  Integration  experts.  Industry  specialists  from  across  the 
street  or  around  the  corner.  They  know  what  makes  your  business 
tick.  They  understand  your  problems  (small,  medium  or  large). 

They  have  enough  experience  to  see  through  complexity,  identify 
what’s  important,  pinpoint  your  needs  and  tailor  solutions  that  aim 
to  deliver  the  biggest  bang  for  your  buck/  ‘HOW  MUCH 

IS  THIS  MIRACLE  GOING  TO  COST?” 

Huge  capital  outlay  hurts.  We  understand  that.  It’s  why  we  created 
the  IBM  Express  Portfolio  of  offerings:  hardware,  software,  services 
and  financing  solutions,  conceived  and  designed  specifically  for 
mid-sized  companies.  Mix-and-match  solutions,  each  one  is  affordable, 
easy  to  install  and  easy  to  manage.  For  example,  managing  IT  resources 
across  multiple  platforms  will  never  be  child’s  play,  but  IBM  Express 
Middleware  has  helped  hundreds  of  companies  make  it  easier 

and  more  cost-effective. “  EASY  AS  PIE?  I  LOVE  PIE.” 

We  all  do.  Simplicity  is  good.  It’s  how  IBM  Express  Portfolio 
offerings  can  deliver  the  advantages  of  on  demand  business  to 
everyone.  Even  companies  with  an  IT  department  of  one.  To  find  out 
how  to  get  started,  visit  ibm.com/ondemand 
IBM  EXPRESS  PORTFOLIO-BUILT  FOR  MID-SIZED  BUSINESSES. 

DEMAND  BUSINESS 


IBM,  the  IBM  logo  and  the  On  Demand  logo  are  registered  trademarks  or  trademarks  of  International  Business  Machines 
Corporation  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks 
or  service  marks  of  others.  ©2004  IBM  Corporation.  All  rights  reserved. 
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Largest  Testing 
Tools  Vendor 
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Hardware  Vendor 

($1.3  billion) 

($0.5  billion) 

($91  billion) 

Application  Debugging 

• 

(Java,  Windows,  Mainframe) 

Application  Quality 

(Java,  Windows,  Mainframe) 

Application  Performance 

(Java,  Windows,  Mainframe) 

Dear  Technology  Executive, 

You  don’t  have  an  unlimited  budget  and  we  understand  that.  At  Compuware,  we’ve  saved 
organizations  between  30%  and  50%  on  their  software  quality  investments — all  while  providing 
the  most  complete  set  of  products  and  services  in  the  industry  today. 

To  achieve  the  results  from  your  IT  projects  that  your  business  users  demand  and  deserve,  it  is 
crucial  to  address  quality  throughout  the  entire  application  life  cycle  on  all  major  platforms. 

That’s  why  Compuware  delivers  quality  solutions  for  development,  QA  and  operations  across  your 
entire  portfolio.  You  and  I  both  know  that  most  application  defects  and  costs  are  introduced  in 
development — and  that  these  problems  are  painful  and  expensive  to  solve  in  production.  With  your 
budget  and  reputation  at  stake,  wouldn’t  you  rather  have  a  relationship  with  one  vendor  that  offers 
a  broad  set  of  solutions  rather  than  a  dozen  niche  prima  donnas? 

Compuware  products  are  in  use  at  98  of  the  Fortune  100  companies — like  Time-Warner.  They  were 
looking  for  better  results,  and  Compuware  saved  them  up  to  50%  on  the  license  and  maintenance 
fees  they  were  paying  to  other  vendors  who  weren’t  helping  them  solve  their  problems. 

So,  if  you’re  tired  of  dealing  with  companies  who  care  more  about  their  bottom  line  than  yours,  call 
1-866-671-7166  or  visit  www.compuware.com/quality  to  learn  more  about  how  we  can  help  you 
deliver  quality  applications,  on  time,  at  a  fraction  of  the  cost. 


Sincerely, 


12&C 


Peter  Karmanosjr. 
Chairman  and  CEO 
Compuware  Corporation 


COMPUWARE, 

www.compuware.com 
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The  right  software  can  help  today's  CIO 
become  tomorrow's  corporate  leader. 

It's  amazing  what  the  right  software  can  do  in  the  right  hands.  Just  ask  the 
CIOs  taking  advantage  of  our  management  software  for  utility  computing. 
They've  transformed  previously  complex  disparate  infrastructures  into 
integrated  springboards  for  business  success.  And  they've  capitalized  on 
tomorrow's  trends  while  heading  off  today's  problems,  all  while  maximizing 
their  existing  resources.  To  learn  how  management  software  can  benefit 
your  business,  not  to  mention  your  career,  go  to  ca.com/management3. 
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total  support. 

WE'LL  MANAGE  YOUR  MISSION-CRI 
SO  YOU  CAN  FOCUS  ON  MANAGINC 


L  APPLH 
UR  BUS 


Our  proactive  approach  to  managed  services  includes  capacity  planning, 
performance  analysis  and  application  deployment  services,  providing  you 
with  the  tools  you  need  to  understand  how  your  application  is  performing, 
leverage  new  technologies  and  plan  for  the  future.  Total  production  support 

to  concentrate  on  strategic 
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DATA  RETURN 


800.767.1514 


highly  managed  hosting  rwW.da 


2004  Data  Return,  LLC.  All  Rights  Reserved. 
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Imagine  a  network  solution  so  advanced,  so  secure,  so  ingeniously  proactive, 

you  may  never  have  to  worry  about  an  outbreak  again. 

Find  out  more  at  www.trendmicro.com/cisco 
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What’s  the  Latest  Round  in  the 
SCO  Boxing  Match? 


It  began  with  a  simple  asset  inventory.  It’s  ended  with  SCO  leav- 
ingthe  Linux  business  and  enteringthe  litigation  business.  All 
the  big  names  are  there:  Microsoft,  IBM,  Linus  Torvalds,  Auto¬ 
Zone.  AutoZone?  You’d  better  stay  tuned  if  you  don’t  want  your 
company’s  name  to  be  next.  Read  The  SCO  Slugfest  (Page  42), 
then  check  out  our  online  resources  that  present  the  only  real-time 
way  to  keep  up  with  the  SCO-Linux  debate.  Find  the  links  in  the  online 
version  of  this  article  or  at  www.cio.com/printlinks. 
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You  Never  Listen 


Help  for  the  Busy  CIO 


Who  knows,  maybe  you’re  on  vacation  this  month?  But,  probably  not.  If  you'd 


If  that’s  what  your  staff  is  saying 
about  you,  you’ve  got  big  problems. 
With  the  fear  and  uncertainty  that 
many  IT  professionals  are  feeling 
as  a  result  of  the  stampede  toward 
offshore  outsourcing,  it’s  impera¬ 
tive  that  you  not  only  ask  staff  what 
they  like  and  don’t  like  about  your 
organization:  You  have  to 
act  on  it.  Fred  Mapp,  CEO 
and  president  of  the 
World  Congress  on 
Information  Technol¬ 
ogy,  outlines  his  case 
in  Open  Ear  Policy 
(Page  30).  What’s 
your  take? Are  you 
listening?  Go  to  the 
Add  a  Comment  section 
of  this  column  online  and  lend  us 
the  wisdom  of  your  ear. 


like  to  shave  a  little  time  off  your  workday,  subscribe  to  The  CIO  Insider 
newsletter,  and  get  all  the  best  of  CIO  and  current  top-of-mind  thinking 
delivered  right  to  your  inbox.  It’s  free.  Just  sign  up  at  www.cio.com/newsletters. 

If  you’re  already  online,  check  out  the  www.cio.com  homepage.  Our 
Spotlight  section  highlights  just  a  few  of  the  stories  you  should  be  reading 
each  day.  They’re  our  editors’  picks:  they’re  your  keys  to  IT  success. 
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CAREER  COUNSELOR:  This  week,  our  experts  discuss  moving  from  director 
to  CIO,  moving  to  a  smaller  company,  dealing  with  impending  mergers, 
moving  from  CIO  to  technical  sales  and  more.  Go  to  www.cio.com/executive. 

MOVERS  AND  SHAKERS:  Who’s  going  where  and  who’s  just  left  what  could 
be  your  dream  job?  Check  out  our  industry  watch  at  www2.cio.com/movers. 

CIO  WANTED:  If  you’re  job  hunting,  start  the  search  here  at  jobs.cio.com. 

CIO  EVENTS  CALENDAR:  If  you’re  a  firm  believer  in  it’s  who  you  know,  not 
necessarily  what  you  know,  get  to  know  the  people  you  need  to  know  at  a 
summit,  conference  or  symposium.  Pick  your  place  among  our  extensive 
listings  at  www.cio.com/events. 
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"I  need  a  field-proven  IP  telephony  solution 
that  can  grow  with  my  business." 


Give  3Com®  a  seat  at  the  table. 


IP  telephony  is  a  long-term  investment.  So  you  need  a  system  that  can  meet  your  long-term  needs. 


3Com  IP  Telephony  Systems  scale  from  5  to  50,000  users  to  support  your  business  growth — 
whether  you  grow  into  a  larger  single  site  or  multi-site  campus.  With  3Com,  teleworkers  and 
remote  offices  can  have  the  same  productivity  enhancements  as  your  international 
headquarters — and  you  can  have  the  same  central  management  and  affordability. 

So  if  you're  looking  at  IP  telephony,  look  at  the  provider  that  can  grow  the  way  you  do.  Give 
3Com  a  seat  at  the  table,  and  get  the  true  scalability  you  need. 


Find  out  more  about  3Com's  IP  Telephony  Solutions  by  visiting  us  at 
www.3com.com/IPtelephony21 .  Or  call  us  at  866-1 PT-3COM. 


Copyright  ©  2004  3Com  Corporation.  All  rights  reserved.  3Com  and  the  3Com  logo  are  registered  trademarks  of  3Com  Corporation  and  Possible  made 
practical  is  a  trademark  of  3Com  Corporation.  All  other  company  and  brand  names  may  be  trademarks  of  their  respective  owners.  CIO  Mag  08/04 
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HELP  FOR  THE  NEXT  GENERATION 

I  found  David  Guzman's  May  1,  2004,  article,  “Against  All  Odds,”  to  be  very  moving. 

I  have  forwarded  it  to  my  daughters  so  that  they  can  understand  and  appreciate 
the  commitment  and  drive  it  takes  to  find  success— however  you  define  it— in  their 
lives.  I  want  them  to  see  someone  overcome  hardships,  since  those  trials  and 
tribulations  are  not  often  found  in  their  ordinary  lives.  They  face  few  obstacles 
(aside  from  peer  pressure  and  the  results  of  a  broken  home)  because  of  what 
has  been  provided  for  them  based  on  their  skin  color,  economic  strata  and 
home  life.  Yours  is  a  story  of  commitment  and  contribution. 

Thanks  to  Guzman  for  sharing  his  passion. 

Joe  Noonan  •  Oracle  •  joseph.noonan@oracle.com 


A#  Odds 


V/-  ***»r?n/  v  *»■« 


Technology  can  be  a  double-edged  sword. 
Our  challenge  is  to  make  sure  it  has  a 
positive  impact  on  today’s  youth,  the 
future  of  our  world. 

As  far  as  our  own  children  being 
privileged,  Guzman  hit  the  nail  on  the 
head.  Society  needs  to  ensure  that  all  chil¬ 
dren  have  access  to  technology  through 
schools  and  that  all  parents  understand 
its  benefits.  We  must  stay  involved  in  our 
children’s  lives  to  make  a  difference,  and 
not  rely  on  the  school  systems  to  be 
babysitters  or  expect  somebody  else  to 
take  ownership. 

R.  Earnie  Seibert 

earnie.seibert@penske.  com 

THE  EVOLVING  BLOG 

The  blog  by  any  other  name.. .is  old  news. 

While  it  only  recently  has  been  known 
as  blogging,  what  Michael  Schrage 
describes  in  “The  Virtues  of  Chitchat” 
(May  15,  2004)  has  existed  in  compa¬ 
nies  for  longer  than  the  20  years  I  have 
been  working  in  IT. 

From  the  Usenet  newsgroups  and 
bulletin  board  software  to  e-mail  archives 
and  the  blog,  the  technology  has  evolved, 
making  the  process  easier  and  better,  but 
the  concept  of  an  open  log  of  group 


communication  around  a  project  or 
common  interest  is  as  old  as  communi¬ 
cation  itself. 

Open  any  management  textbook  and 
you  will  see  reams  of  theory  about  the 
informal  information  networks  that 
develop  in  companies  and  how  to  cap¬ 
ture  their  value.  From  the  watercooler 
to  the  blog,  some  companies  will  fight 
them,  some  embrace  them,  for  good 
reasons  and  for  bad,  and  either  way 
they  will  carry  on  and  continue  to 
adopt  new  technologies  that  make  the 
process  simpler. 

What  Michael  Schrage  finds  “easy  to 
imagine,”  the  rest  of  us  have  been  find¬ 
ing  easy  to  do  for  many  years  now.  Wel¬ 
come  to  the  real  world,  Mr.  Schrage; 
nice  of  you  to  notice  us. 

Gideon  Sheps 

NetDimensions 
gideon@netdimensions.  com 

CIO:  A  SHORT-LIVED  ROLE 

Many  thanks  to  Patricia  Wallington  for 
“The  Ties  That  Bind”  (May  15,  2004). 
Fler  insight  is  right  on. 

One  of  the  most  difficult  (and  recur¬ 
ring)  challenges  that  I  face  as  a  manager 
is  setting  my  coworkers’  expectations  of 


my  role.  Many  managers  and  direct 
reports  seem  to  have  skewed  perceptions 
of  the  role  and  involvement  of  man¬ 
agers.  I  have  found  it  difficult  to  watch 
the  “big  picture”  when  upper  manage¬ 
ment  expects  me  to  provide  detailed 
troubleshooting  and  updates  on  the 
smallest  of  issues.  At  the  same  time, 
many  direct  reports  expect  me  to  be  the 
expert  in  all  of  their  job  functions:  mas¬ 
ter  business  analyst,  master  technologist, 
master  designer  and  so  on.  It  is  unfor¬ 
tunate  that  good  management  skills  are 
often  discouraged  by  the  organizations 
that  need  them  the  most. 

It  was  hard  for  me  to  personally  let 
go  of  doing  what  made  me  a  successful 
individual  performer.  It  is  even  harder  to 
get  others  to  understand  that  my  real 
value  is  in  unleashing  and  directing  the 
performance  of  those  I  lead. 

Diane  D.  Miller 
dianedmiller@mindspring.com 


What  Do  You  Think? 


Send  your  thoughts  and  feedback  to 
letters@cio.com  Letters  may  be  edited  for 
length  or  clarity.  For  a  link  to  the  articles 
mentioned,  go  to  www.cio.com/printlinks 
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>  With  Sprint,  Electronic  Arts  is  beautiful 


Electronic  Arts  makes  beautiful  video  games.  Since  this  entertainment 
powerhouse  switched  its  data  transport  from  ATM  to  IP  with  Sprint, 
coupled  with  Electronic  Arts'  technology,  network  performance  has  improved 
dramatically.  Gigabytes  of  game  code  and  digital  assets  that  took  8-10  hours 
to  send  now  take  less  than  20  minutes.  Thanks  to  shortened  data  transport 
times  and  the  ability  to  host  digital  assets  in  one  place,  the  process 
of  developing  games  is  now  both  quick  and  highly  collaborative,  with 
information  sharing  amongst  more  than  40  countries.  And  since  switching 
to  Sprint,  Electronic  Arts  saves  roughly  $100,000  a  month.  With  Sprint, 
Electronic  Arts  is  reliable,  faster  and  more  effective  -  in  a  word,  beautiful. 
With  Sprint,  business  is  beautiful.' 

>  Visit  Sprint.com/beautiful  for  case  studies  or  call  877-777-5568  > 
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Fortunately  you  have  the  most  manageable 

video  conferencing  systems  in  the  world. 


With  IT  resources  scarcer  than  ever,  you  need  Polycom's  integrated  video  conferencing 
systems.  They're  user  friendly,  easy  to  upgrade,  manage  and  maintain.  Deployment  is 
virtually  "plug  and  play."  And,  monitoring  and  management  is  centralized.  It  all  adds  up 
to  a  great  ROI  foryourteam  and  your  company.  Join  the  millions  of  people  worldwide  that 
already  use  Polycom  and  The  Polycom  Office!"  With  integrated  video,  voice,  data,  and 
Web  applications,  The  Polycom  Office  makes  communicating  as  natural  as  being  there. 

For  more  information  and  your  free  white  paper  "Demystifying  IP  Migration"  visit 
www.polycom.com  or  call  1-877-POLYCOM.  Ask  about  the  outstanding  new  Polycom 
VSX"  7000  -  video  conferencing  like  you’ve  never  seen  it.  Polycom.  The  time  for 
manageable  video  conferencing  is  now. 


POLYCOM 


Connect.  Any  Way  You  Want. 


©2003  Polycom,  Inc.  All  rights  reserved.  Polycom  and  the  Polycom  logo  are  registered  trademarks  and  VSX.  Polycom  Office 
and  the  SoundStation  industrial  design  are  trademarks  of  Polycom,  Inc.  in  the  U  S  and  various  countries. 


Middleware  is  Everywhere 


MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software 
likeTivoli®  and  WebSphere®  And  it’s  at  the  heart  of  solving 
what  analysts  call  the  key  issue  of  2004:  automation 
IBM  middleware  is  open  and  can  deliver  it  all  at  a  pace 
to  match  your  needs.  It  anticipates  problems,  responds 
to  change  and  optimizes  resources.  And  it  all  leads  to 
meeting  business  goals.That’s  ON  DEMAND  BUSINESS. 


1.  Increased  ATM  activity  detected  instantly. 

2.  Identities  confirmed  securely. 

3.  Online  banking  increases  dramatically. 

4.  IT  resources  optimized  dynamically. 

5.  Bank  serves  customers  easily. 


Learn  more  about  middleware  and  IBM’s  leadership  role  in  automation  at  ibm.com/middleware/automate 


Middleware 


registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other 
ygrite  reserved. 
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ELECTION  2004 


E-Voting  Debacle  Looms 


This  November  millions  of  voters  will 
cast  their  ballots  using  touch-screen  e-voting 
machines  despite  increasing  evidence  that  the 
technology  is  far  from  fail-safe.  Indeed,  as 
the  election  nears,  the  debate  over  electronic 
voting  has  become  ever  more  contentious. 

Its  fans  believe  that  e-voting — in  which 
votes  are  cast,  recorded  and  counted  electron¬ 
ically — will  ensure  the  integrity  of  results, 
streamline  election  administration,  and  at 
last  give  Americans  who  previously  were 
unable  to  vote  unassisted  access  to  a  secret 
ballot.  While  those  benefits  may  be  true, 
a  growing  contingent  of  e-voting  opponents, 
among  them  a  vocal  group  of  computer 
scientists,  is  saying  that  e-voting  software  is 
currently  too  rife  with  security'  gaps  and  bugs 
to  serve  as  the  linchpin  of  our  democracy. 

Despite  the  uncertainty,  e-voting  is  destined 
for  a  polling  place  near  you.  According  to 
Election  Data  Services,  close  to  20  million 


registered  voters  used  e-voting  systems  in 
2000,  and  that  number  will  leap  to  more 
than  50  million  this  November. 

That  rollout  assuredly  will  not  be  smooth. 
In  April,  for  example,  California  Secretary 
of  State  Kevin  Shelley  banned  the  usage  of 
a  touch-screen  system  from  Diebold  Election 
Systems  in  four  counties,  citing  the  use  of 
uncertified  software.  For  all  touch-screen 
machines,  California  now  requires  vendors 
to  provide  a  paper  audit  trail  and  access 
to  source  code  upon  request.  California 
also  will  require  polling  places  to  provide 
paper  ballots  to  voters  upon  request. 

Before  e-voting  becomes  a  secure, 
reliable  and  accepted  way  of  choosing 
our  leaders,  experts  say  three  key  chal¬ 
lenges  must  be  addressed:  how  to  provide 
reliable  audit  trails  that  will  help  defend 
against  fraud  and  ensure  an  accurate 
recount;  how  to  prevent  tampering  of 


Goldberg  and  Megan  Santosus 


A  Los  Angeles  voter  checks  his  ballot  during 
last  October’s  recall  election.  Electronic  voting 


systems  are  designed  to  replace  paper  ballots, 
but  some  election  officials  are  demanding  the 
systems  provide  an  audit  trail. 

the  electronic  transmission  of  data;  and 
how  to  train  approximately  1 73  million 

Continued  on  Page  20 


PHYSICAL  SECURITY 


GOP  Convention  Security  Takes  Over  New  York  City 


Security  costs  money.  Security  at  the  Republican  National 
Convention,  the  four-day  event  scheduled  later  this  month  in  Midtown 
Manhattan,  will  cost  an  estimated  $76  million. 

Most  of  the  money  ($59  million)goes  to  pay  overtime  for 
6,000-10,000  New  York  City  police  officers  to  patrol  in  and  around 
Madison  Square  Garden  during  the  Aug.  30-Sept.  2  event.  The 
estimate  also  includes  the  training  of  officers  to  prepare  for 
a  potential  terrorist  attack  (whether  it’s  chemical,  biological  or 
radiological),  The  Associated  Press  reported.  In  addition,  10,000 
officers  were  scheduled  to  receive  training  in  subway  track  safety, 


handling  hazardous  materials  and  "terrorism  awareness.” 

Awareness  about  the  GOP  gathering  will  not  be  a  problem  in  New 
York.  Like  the  recent  Democratic  convention  in  Boston,  where  plans 
called  for  highway  and  train  station  shutdowns  (see  "Security  Trumps 
Transportation  in  Boston,”  www.cio.com/printlinks ),  residents  and 
tourists  alike  will  know  it’s  there. 

For  one  thing,  organizers  of  14  street  fairs  that  traditionally  occur 
at  the  end  of  August  have  had  to  reschedule  their  events,  Newsday 
reported.  Why?  The  police  can’t  direct  traffic  around  the  fairs  because 
they  are  too  busy  guarding  the  convention. 
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Now  you  can't  say  you  haven't  heard  of  us 


Now 


that  you've  heard  of  us,  here  are  six  good  reasons  why  you  should  care: 


•  Equant  is  the  proven  industry  leader  in  global  business  communication  solutions  for  multinational 
•  companies. 

•  Supporting  you  with  people  and  expertise  in  165  countries,  wherever  you  do  business. 

•  A  single,  seamless  network  in  220  countries  and  territories. 

•  Saving  you  time  and  money,  improving  end-user  and  customer  satisfaction,  delivering  solutions 
tailored  to  your  business  processes. 

•  Offering  you  a  complete  range  of  global  communication  solutions,  addressing  your  urgent  issues: 
Compliance,  Security,  Applications  Performance,  Vendor  Management,  IP  Telephony. 

•  Enabling  your  global  communications  to  run  smoothly  so  you  can  focus  on  your  company's  core 
business. 


To  discover  how  Equant's  solutions  can  enhance  your  business  visit  our  website  now: 
www.equant.com/usa  or  meet  us  at  the  CI0 100  Symposium,  August  22  -  24,  and  learn  how 
Microsoft  uses  Equant  for  global  solutions  involving  its  mission  critical  revenue-generating  networks. 


When  you  want  to  transform 

your  global  communications,  we'll  be  with  you. 
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E-Voting  Debacle  Looms 


►  THE  TOOLS  OF  DEMOCRACY  ◄ 

In  addition  to  common  challenges  like  fraud  and  ballot  design, 
each  voting  option  comes  with  its  own  set  of  risks  and  rewards 


Continued  from  Page  1 8 

registered  voters  of  wildly  varying  education  levels  and  technical  sophistication 
to  use  the  new  systems. 

Many  computer  scientists  believe  the  best  way  to  mitigate  the  audit  problem 
is  to  combine  electronic  machines  with  good,  old-fashioned  paper  by  including 
a  voter- verified  paper  ballot.  “The  big  issue  in  any  election  is  auditability,”  says 
Doug  Jones,  associate  professor  of  computer  science  at  the  University  of  Iowa. 
An  auditable  election,  in  his  view,  is  one  in  which  the  results  are  verifiable  both 
to  independent  observers  and  to  any  other  interested  party. 

To  address  security 

- — - risks,  e-voting  proponents 

point  to  locked,  tamper¬ 
proof  computers;  one-time, 
quick  transmission  of 
results;  and  trained  poll 
workers.  But  computer 
scientists  say  the  most 
serious  security  issue  posed 
by  current  e-voting  systems 
is  source  code  riddled 
with  vulnerabilities. 

Although  election 
boards  certify  e-voting 
systems  prior  to  their  use, 
critics  insist  that  voting 
software  should  be  open 
source,  or  at  least  open 
to  public  scrutiny.  With 
software,  critics  point 
out,  it  takes  only  one 
well-placed  person  to 
exploit  insecure  code  and 
perhaps  change  the  out¬ 
come  of  an  election. 

Given  the  wide  range 
of  computer  literacy 
among  the  voting  public, 
Jones  says  that  election 
officials  and  vendors 
need  to  pay  more  atten¬ 
tion  to  ballot  and  interface  design  so  that  voters  don’t  do  things  they  don’t 
intend — such  as  submitting  their  ballot  before  selecting  all  their  candidates. 

To  date,  research  on  e-voting  usability  is  lacking.  To  analyze  usability,  the 
National  Institute  of  Standards  and  Technology  recommends  that  election 
officials  run  pilots  with  actual  voters  and  poll  workers.  The  institute  also 
suggests  that  vendors  adhere  to  common  usability  standards — although  such 
standards  have  yet  to  be  defined. 

As  is  frequently  the  case  in  political  matters,  both  sides — the  vendors  promoting 
their  wares  and  the  computer  scientists  worrying  about  election  integrity — are 
digging  in.  This  presidential  election  will  put  millions  of  touch-screen  systems  to 
their  biggest  test  yet.  And  if  this  election  turns  out  as  close  as  the  last  one,  e-voting 
may  be  the  number-one  postelection  story.  To  learn  more,  read  “E-Democracy: 

The  Lowdown  on  E- Voting”  at  wunv.cio.com/printlinks.  -Megan  Santosus 
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Paper  Intuitive;  voter- 
verified  ballots 


Punch  Automated  tallies; 

Cards  voter-verified  ballots 


Lever  Increased  privacy 

Machine 


Optical  Automated  tallies; 

Scan  voter-verified  ballots 


E-Voting  Eliminates  overvoting; 

supports  multiple 
languages;  enables 
access  for  disabled 
voters 


Ballot-box  stuffing; 
time-consuming  and 
error-prone  tallying 

Undervoting;  over¬ 
voting  leads  to  disqual¬ 
ification  of  ballots 


Mechanical  break¬ 
down;  no  paper 
trail;  undervoting 

Undervoting;  over¬ 
voting  leads  to  disqual¬ 
ification  of  ballots 


Auditing  difficulties; 
hacking 


OFFSHORE  OUTSOURCING 

Job  Stats 
Undercut 
Offshore  Fears 

In  this  election  year,  offshore  outsourcing 
is  the  hot-button  economic  issue.  But  just  how 
many  jobs  are  actually  sent  overseas?  According 
to  a  report  from  the  Bureau  of  Labor  Statistics 
(BLS),  the  number  of  American  jobs  lost  to 
“overseas  relocations”  totaled  4,633  during  the 
first  quarter  of  2004.  This  accounts  for  only 
2  percent  of  the  nearly  240,000  jobs  lost 
during  that  time.  In  fact,  domestic  outsourcing 
(jobs  going  from  one  American  company  to 
another)  claimed  more  than  twice  as  many 
positions  (9,900)  as  offshore  outsourcing  did. 


.  -  ?! 


When  the  report  was  initially  released  in 
June,  sentiment  among  the  media  seemed  to 
imply  that  the  impact  of  outsourcing  on  U.S. 
job  losses  has  been  greatly  exaggerated.  But 
some  economists  say  the  report  doesn't  tell 
the  whole  story  of  outsourcing. 

“There’s  no  problem  with  the  numbers,  just 
the  interpretation,"  says  Charles  McMillion, 
president  and  chief  economist  at  MBG  Informa¬ 
tion  Services,  a  business  information,  analysis 
and  forecasting  company.  McMillion  points  out 
that  the  report  includes  statistics  gleaned  only 
from  companies  that  laid  off  50  or  more 
employees— a  snapshot,  he  says,  that  “repre¬ 
sents  maybe  3  percent  of  the  job  turnover  at 
any  given  time.”  The  real  impact  of  outsourcing 
isn’t  captured  in  the  BLS  report,  McMillion 
says.  "With  product  cycles  as  short  as  they  are, 
and  a  dynamic  labor  market,  the  economy 
needs  to  generate  large  numbers  of  jobs,”  he 
says.  A  better  gauge  of  offshore  outsourcing's 
impact  on  the  U.S.  economy  is  not  how  many 
jobs  are  lost  to  it,  but  how  many  jobs  are  never 
created  in  the  first  place.  -M.S. 


2  0  CIO  AUGUST  1,  2004 


www.cio.com 


EMC2 

where  information  lives 


Fr:  compliance  as  a  test  of  IT  infrastructure 


To:  compliance  as  a  routine  part  of  your  day 


EMC  HELPS  YOU  MEET  NEW  COMPLIANCE  DEMANDS.  The  cause,  compliance  regulations.  The  effect, 
a  stress  upon  IT  resources.  Now,  if  regulators  request  your  data  in  24  hours,  you  can  deliver,  no  questions  asked. 
With  information  lifecycle  management,  you  can  easily  retrieve  archived  e-mail,  and  manage  vast  amounts  of  data. 
And  since  EMC  has  the  broadest  family  of  information-management  platforms,  software,  services,  and  solutions, 
we’re  ready  to  help  you  take  on  any  IT  challenge.  To  learn  more,  visit  www.EMC.com/compliance. 


I  Me.  [Me.  .iihI  when’  information  lives  are  registered  trademarks  of  EMC  Corporation.  ©  2004  EMC'  Corporation.  All  rights  reserved. 
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Social  Studies 

As  the  ghost  of  Jacob  Marley  famously  advised  Scrooge, 

“Business!  Mankind  was  my  business. 

The  common  welfare  was  my  business....” 

Here  are  four  recent  books  that  honor  his  insight. 


Begging  for  Change 

The  Dollars  and  Sense  of  Making 
Nonprofits  Responsive,  Efficient, 
and  Rewarding  for  All 

By  Robert  Egger 

HarperCollins  Publishers,  2004,  $24.95 

Many  in  the  for-profit  world  view  nonprofit 
and  especially  charitable  organizations  as 
poor  relations.  This  book  may  change  that 
attitude;  although  author  Robeit  Egger,  who 
has  run  a  community  kitchen  in  Washington 
for  the  past  1 5  years,  isn’t  exactly  happy  with 
the  status  quo  of  how  many  nonprof¬ 
its  operate.  As  the  title  suggests,  this 
is  basically  a  book  about  effecting 
change.  Why  do  groups  keep 
doing  the  things  they  do  even 
when  they  don’t  work?  Are 
organizations  capable  of  figur¬ 
ing  out  how  to  do  things  bet¬ 
ter,  smarter,  faster  and 
cheaper?  Egger  poses  these  questions  to 
nonprofits,  but  perceptive  readers  will 
acknowledge  that  corporations  need  to 
answer  them  too.  -Carol  Zarrow 

How  to  Change 
the  World 

Social  Entrepreneurs  and 
the  Power  of  New  Ideas 

By  David  Bornstein 

Oxford  University  Press,  2004,  $28 

When  it  comes  to  doing  what  matters 
and  what’s  right,  this  book 
takes  the  perspective  of 
individuals  rather  than 
corporations.  Focused  on 
those  who  solve  social  prob¬ 
lems  on  a  large  scale,  this  book 
profiles  a  select  group  of  highly 


energetic,  innovative  and  yet  largely 
unknown  people.  While  the  author  says 
social  entrepreneurs  are  ordinary  people 
with  an  extraordinary  drive  to  change  the 
world  for  the  good,  the  stories  he  tells  belie 
his  own  conclusion:  These  are  not  ordinary 
individuals.  Can  one  person  indeed  effect 
positive  social  change?  This  book  says  yes. 

-Megan  Santosus 


Starting  in  Our 
Own  Backyards 

How  Working  Families  Can 
Build  Community  and  Survive 
the  New  Economy 

By  Ann  Bookman 
Routledge,  2004,  $26 

Social  anthropologist  Ann  Bookman  spent 
nearly  five  years  conducting  field  studies 
of  how  40  Boston-area  families  struggled 
to  balance  family  responsibilities  with  the 
demands  of  work.  She  found  that  families 
who  both  participate  in 
and  rely  on  informal 
networks  of  relatives, 
other  parents,  social 
agencies  and  religious 
institutions  come  closer 
to  achieving  that  balance 
than  families  who  don’t. 
She  therefore  urges  compa¬ 
nies  to  invest  in  the  family 
support  services  on  which 
their  employees  rely  and 
encourage  employee  involve-  f 
ment  in  community  volunteer 
work.  As  you  read  this  book, 
think  about  how  the  people  in  it 
could  easily  be  your  employees, 
your  coworkers  or  even  yourself. 

-C.Z. 


CIO  Best-Seller  List 

Execution:  The  Discipline  of  Getting 
Things  Done 

By  Larry  Bossidy  and  Ram  Charan 
Crown  Publishing  Group,  2002 

Fish!  A  Remarkable  Way  to  Boost  Morale 
and  Improve  Results 

By  Stephen  C.  Lundin,  Harry  Paul  and 
John  Christensen 
Hyperion  Press,  2000 

Trump:  The  Way  to  the  Top:  The  Best 
Business  Advice  I  Ever  Received 

By  Donald  J.  Trump 

Crown  Publishing  Group,  2004 

Now,  Discover  Your  Strengths 

By  Marcus  Buckingham  and 
Donald  0.  Clifton 
The  Free  Press,  2001 

Good  to  Great:  Why  Some  Companies 
Make  the  Leap— and  Others  Don’t 

By  Jim  Collins 
HarperCollins,  2001 

SOURCE:  Compiled  by  Borders  Group.  June  2004 


What  Matters  Most 

How  a  Small  Group  of  Pioneers 
Is  Teaching  Social  Responsibility 
to  Big  Business,  and  Why  Big 
Business  Is  Listening 

By  Jeffrey  Hollender  and  Stephen  Fenichell 
Basic  Books,  2004,  $26 

If  nothing  else,  this  book  will  change  your 
thinking  about  what  makes  a  company 
socially  responsible.  One  might  expect 
coauthor  Jeffrey  Hollender — CEO  of 
“green”  company  Seventh  Generation — to 
be  a  diehard  on  the  topic.  Yet  in  his  opinion, 
being  socially  responsible  primarily  requires 
that  a  company  acknowledge  any 
mAWK\  adverse  effects  of  its  products  and 

services,  and  work  toward  miti- 
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gating  them.  The  index  of 
resources  about  doing  business 
in  a  socially  responsible  way 
is  particularly  comprehen¬ 
sive  and  useful.  -M.S. 
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Performance  management  dashboards. 

If  they  haven't  asked  for  them  yet,  they  will. 


* 

Performance  Management  from  Business  Objects 


You  know  what  management  wants.  The  same 
thing  they  always  want.  The  right  information 
delivered  to  the  right  people  at  the 
right  time  so  they  can  make  the 
right  decisions.  So  let  them  have  it. 

With  performance  management 
dashboards  from  Business  Objects. 

Our  dashboards  link  goals, 
information,  and  people,  enabling  organization-wide 
tracking  of  key  performance  indicators  such  as 
expense  targets,  sales  performance,  and  supply  chain 
metrics.  They  provide  alerts,  scorecards,  analytics, 
and  reports  which  enable  decision-makers  to 


set  goals,  track  key  business  metrics,  analyze 
performance,  and  make  smarter  decisions. 

More  than  24,000  companies 
rely  on  Business  Objects  business 
intelligence  software  every  day 
to  better  track,  understand,  and 
manage  their  business  to  maximize 
enterprise  performance.  Perhaps 

you  should,  too. 

Register  for  our  seminar  series  "Dashboard 
Advantage  2004"  at  www.businessobjects.com/epm. 
Or  call  1-800-877-2340.  And  give  management 
what  they  want,  before  they  ask. 


InlOIM  M‘M 
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Dashboard  Advantage  2004  Seminar  Series:  Atlanta  •  Boston  •  Chicago  •  Dallas  •  Detroit  •  Hartford  •  Houston  •  Los  Angeles  •  New  York  •  San  Francisco  •  Toronto  •  Washington  DC 


BUSINESS  OBJECTS’ 

The  business  intelligence  standard. 


MARINE  BIOLOGY 

Chips  for  Fish 

Scientist  uses  computer  tags  to  track 
Pacific  coast  salmon 


Where  salmon  swim  once  they’ve  hatched — their  exact 
path  up  the  Pacific  Northwest  coastline  to  Alaska — is  a 
question  that’s  long  puzzled  scientists  working  to  better  man¬ 
age  North  American  fishing  stocks.  Now  David  Welch, 
a  British  Columbia-based  marine  biologist,  is  using  tiny 
computers  and  data  retrieval  technology  to  reveal  the  fish’s 
secret  migratory  lives. 

As  part  of  the  Pacific  Ocean  Salmon  Tracking  (POST) 
project,  Welch  has  surgically  implanted  tiny  computer 
chips  into  the  body  cavities  of  roughly  1,200  salmon.  These 
computer  chips,  called  acoustic  tags,  transmit  individual 

serial  numbers  that  are 
detected  by  receivers  that 
sit  on  the  seabed.  When  a 
tagged  fish  passes  within 
range  of  a  receiver,  the 
device  records  information 
on  the  direction,  speed  and 
timing  of  the  salmon’s 
movements.  Once  boats 
retrieve  these  receivers  from 
the  water’s  depths  via  a 
tracking  system  and 
retrieval  mechanism,  scien¬ 
tists  can  reconstruct  and 
examine  the  data. 

A  lot  is  riding  on  Welch’s  detective  work.  Until  recently, 
marine  biologists  had  to  physically  retrieve  tags  attached  to 
fish  to  determine  how  far  the  fish  had  traveled.  Even  after 
that  effort,  there  was  no  way  of  determining  what  had  hap¬ 
pened  to  the  fish  throughout  its  journey  from  river  to  ocean. 

But  thanks  to  innovations  in  the  size  and  battery  life  of 
tags,  as  well  as  the  development  of  underwater  listening 
stations,  Welch  will  be  able  to  collect  data  on  where  salmon 


Acoustic  tags  of  differing  life  spans 
are  shown  beside  a  steelhead  smolt 
that  has  been  implanted  with  a  tag. 
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go  once  they’ve  reached  the  ocean,  how  long  they  stay  in 
different  areas  and  how  ocean  conditions  such  as  temperature 
affect  survival  rates — key  information  that  will  lead  to  better 
conservation  and  effective  fish  management  strategies. 

“For  the  first  time  ever,  we  will  have  an  extremely  rich 
data  set  on  many  different  stocks  of  salmon  that  will  allow 
us  to  pry  open  the  ocean’s  black  box  and  understand  where 
salmon  go,”  says  Welch. 

But  a  unique  blend  of  fish  and  chips  isn’t  all  that  renders 
Welch’s  investigation  innovative.  By  midsummer,  Welch  will 
have  placed  receivers  along  120  kilometers  of  seabed,  stretch¬ 
ing  from  the  Columbia  River  in  Washington  up  toward 
the  northern  Gulf  of  Alaska.  The  POST  project,  with  $6.2  mil¬ 
lion  in  funding  in  the  next  two  years  from  foundations  and 
industry,  is  a  geographically  ambitious  undertaking  that  has 
never  before  been  attempted. 

“The  scope  at  which  David  is  attempting  to  produce  data 
will  provide  some  really  interesting  information  on  a  much 
broader  [geographical]  scale,”  says  James  Lindholm,  a  senior 
research  biologist  at  the  Pfleger  Institute  of  Environmental 
Research  in  Oceanside,  Calif. 

The  breadth  of  data  Welch  collects  will  ultimately  hinge 
on  how  successfully  he  retrieves  his  receivers  from  the  bottom 
of  the  ocean  in  the  early  fall.  But  if  Welch’s  recent  pilot 
projects  are  any  indication,  the  secret  lives  of  salmon  will 
soon  surface.  -Cindy  Waxer 


Marine  biologists  plan  to  track 
the  migratory  paths  of  Pacific 
coast  salmon  on  their  way  to 
these  Gulf  of  Alaska  waters. 
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i  CALL  are 


Consider  the  dots  connected.  The  end-to-end  voice  over  IP  solution  we  designed 
for  Crate  and  Barrel  features  a  unified  IP  messaging  platform  and  the  most  advanced 
hardware  available.  The  new  system  will  save  them  a  bundle  on  maintenance,  management 
and  wiring,  while  easing  the  cost  and  complexity  of  adding  features  or  employees.  And 
it’s  already  improving  productivity,  helping  over  400  associates  make  millions  of  customers 
feel  right  at  home.  To  find  out  more,  go  to  sbc.com/dots.  GOING  BEYOND  THE  CALL.' 
registered  trademarks  of  SBC  Knowledge  Ventures,  L.P.  and/or  its  affiliates.  ©2004  SBC  Wedge  Ventures.  L.P.  All  rights  reserved. 
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On  the  Move 


By  Meridith  Levinson 


Unisa  CIO  Takes  Stock  of  His  Career 
While  on  Vacation 


For  two  years, 

Joe  Gagliardi  has  been 
pondering  where  to  go 
next  in  his  professional 
life.  While  he  loves  his 
job,  the  48-year-old  CIO  of  Unisa  America,  a 
manufacturer  of  women’s  shoes  and  acces¬ 
sories,  doesn’t  see  much  of  a  future  for  himself 
in  the  CIO  position.  For  one  thing,  he  consid¬ 
ers  it  to  be  a  young  man’s  job  because  of 
its  breakneck  pace.  And  while  he  contem¬ 
plates  becoming  CIO  of  a  larger  company, 
Gagliardi  doesn't  think  he’d  enjoy  dealing 
with  the  politics  inside  big  enterprises.  But  it 
wasn't  until  this  past  May  when  he  vacationed 
in  Jamaica  with  his  wife  and  a  group  of  acquain¬ 
tances  that  his  next  step  (and  a  plan  of 
action  for  getting  there)  came  into  focus. 

Gagliardi's  vacation-inspired  career 
assessment  is  hardly  unusual.  Vacations 
are  the  perfect  opportunity  for  mulling 
career  decisions,  says  Carl  Gilchrist,  North 
American  leader  for  Spencer  Stuart’s  CIO 
practice.  Gilchrist  can’t  begin  to  count  the 
number  of  times  CIOs  have  called  him  upon 
returningfrom  vacation  to  tell  himthatthey 
want  to  make  a  career  change.  Vacations 
are  so  opportune  for  taking  stock  of  one’s 


career,  Gilchrist  says,  because  when  you’re 
away  from  work,  you  are  more  detached  from 
your  job’s  stresses  and  can  gain  a  perspec¬ 
tive  on  whether  you  still  enjoy  your  career. 

For  Gagliardi,  getting  away  from  the  worka¬ 
day  world  (where  everyone  around  him  is 
stressed)  to  stay  at  a  resort  surrounded  by 
a  bunch  of  entrepreneurs  helped  him  see 
what  professional 


realized  then  that  his  ticket  out  of  the 
professional  holding  pattern  he’d  been 
stuck  in  for  the  past  two  years  was  to  take  a 
risk  of  his  own  and  start  his  own  business. 

What  attracts  him  most  about  starting 
his  own  business  is  the  peace  of  mind  that 
comes  from  knowing  that  his  future  is  in  his 
hands,  not  someone  else’s.  "Not  only  do 


direction  he  should 
take.  As  he  glanced 
around  the  resort’s 
pool  at  his  wealthy 
traveling  companions, 
he  noticed  they  didn't 
once  mention  the 
pressures  of  their  jobs. 

It  dawned  on  him  what 
these  men  have  in  common:  They’re  all 
established,  self-employed  businessmen. 
Gagliardi  saw  that  the  main  difference 
between  him  and  these  men  was  that  they 
had  all  taken  a  risk,  worked  hard  to  get  their 
own  businesses  off  the  ground  and  were  now 
reaping  the  rewards.  Fie,  on  the  other  hand, 
had  chosen  to  spend  his  entire  career  working 
for  someone  else  and,  subsequently,  has 
always  worried  about  his  fate.  Gagliardi 


Why  start  your  own  business?  “Not  only  do  you 
make  your  own  schedule,  but  you  succeed  or  fail 
based  on  your  own  hard  work.” 


-JOE  GAGLIARDI 


The  following  announcements  testify  to  the  importance  of  the  CIO 
position  and  indicate  that  things  might  actually  be  looking  up  for  CIOs: 

»  PetSmart  has  appointed  Jeff  Yabuki,  CIO  of  H&R  Block,  and  Rita  Foley, 
the  former  CIO  of  Westvaco  (now  SVP  of  MeadWestvaco),  to  its  board 
of  directors. 

»  Minneapolis-based  manufacturer  Tennant  Co.  has  elected  Jeff  Balagna,  CIO  of  Medtronic 
to  its  board  of  directors. 

»  Tom  Beauchamp,  the  new  CIO  of  teen  clothing  retailer  Hot  Topic,  now  reports  to  the  CEO. 

»  Robert  E.  Keller,  president  and  CEO  of  APAC  Customer  Services  Inc.,  has  named  his  CIO 
Mark  E.  McDermott  as  a  member  of  his  senior  management  team. 


you  make  your  own  schedule,  but  you 
succeed  or  fail  based  on  your  own  hard 
work  and  not  someone  else’s  mistake,” 
he  says.  “For  instance,  I’m  worried  at  my 
company  that  we  don’t  sell  enough  shoes 
to  stay  profitable.”  Beyond  implementing 
cost-effective  systems,  he  adds,  “there’s 
nothing  [much]  I  can  do  about  it.” 

So  what’s  Gagliardi  planning  to  do  next? 
As  excited  as  he  is  to  start  his  own  business, 
he  doesn’t  want  to  take  on  too  much  change 
too  soon,  so  he  doesn’t  plan  on  quitting  his 
day  job  as  CIO.  He  intends  to  start  a  Web- 
based  business  on  the  side  importing  and 
selling  an  herbal  supplement  he’s  been 
taking  under  his  doctor's  supervision  to 
control  his  cholesterol.  Gagliardi  wants  to 
start  out  small  so  that  he  can  place  and  fill 
orders  during  evenings  and  weekends  in 
orderto  minimize  his  investment  and  any 
potential  losses  if  he  doesn’t  succeed. 
"Hopefully  we’ll  get  more  orders  than  we 
can  handle,  but  if  it  doesn’t  happen,  we're 
not  out  much,”  he  says.  "And  if  this  doesn’t 
work,  it  will  be  another  thing.” 
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^  Symantec 


How  secure  companies  manage  their  security. 


Managed  Security  Services  by  Symantec.  As  threats  have  become  more  complex,  so  too  has  the  job  of 
monitoring  and  managing  a  company’s  information  security.  That’s  why  so  many  enterprises  entrust  their 
information  security  operations  to  Symantec.  Our  global  intelligence  network  spans  40  countries  and  monitors  threats 
24  hours  a  day,  providing  you  the  benefits  of  a  world-class  security  infrastructure  while  sparing  you  the  complications  of 
building  your  own.  All  of  which  can  help  reduce  not  only  your  risks  but,  ultimately,  your  costs  as  well.  To  learn  how  you  can 
make  your  company  more  secure,  visit  http://ses.symantec.com/SOC  to  download  our  free  white  paper,  “Demystifying  the 
Managed  Security  Service  Provider  Market,”  and  take  a  virtual  tour  of  our  Security  Operations  Center. 
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SUPPLY  CHAIN  STANDARDS 

Fruit  Vendor  Updates  Systems 
to  Satisfy  Wal-Mart 


In  early  2003  ,  the  supply  chain  writing 
was  on  the  wall.  Executives  at  J.R.  Wood, 
a  privately  held,  $135  million  frozen  fruit 
vendor,  knew  they  would  need  to  update 
their  IT  systems  to  more  efficiently  enable 
electronic  transmissions  about  product 
shipments  to  Wal-Mart. 

J.R.  Wood's  efforts  would  start  with  an 
upgrade  to  an  integrated  package  to 
interface  with  an  ERP  system,  then  support 
UCCnet,  an  initiative  started  in  1998  by  the 
nonprofit  Uniform  Code  Council  standards 
group  to  create  a  common  repository  for 
product  data— prices,  colors,  dimensions 
and  other  specifications  of  goods  headed 
for  retail  shelves. 


Initiatives  aimed  at  standardizing 
supply  chain  technologies  are  popular  with 
retailers,  but  can  be  frustrating  to  their 
suppliers  since  cleaning  up  a  data  reposi¬ 
tory  to  automate  it  can  be  costly.  But  with 
powerful  players  like  Wal-Mart  using  their 
clout  to  mandate  adoption,  compliance 
with  measures  such  as  UCCnet  and  radio 
frequency  identification  (RFID)  is  a  matter 
of  when,  not  if. 

Implementation  of  the  new  systems  at 
J.R.  Wood’s  Atwater,  Calif.,  headquarters 
wasn't  without  snags;  the  software  the 
company  used  didn’t  integrate  with  its  ERP 
system,  J.D.  Edwards'  World  software. 

With  a  January  2004  Wal-Mart  deadline 
looming,  IT  Director  Jennifer  Jones  went 


shopping  for  a  replacement  and  settled  on 
a  system  from  Extol  International.  J.R.  Wood 
went  live  on  UCCnet  with  Wal-Mart  in 
February.  The  company  now  supports 
EDI  transactions  for  all  of  its  products. 

Jones  says  the  system  helped  her 
company  improve  its  internal  processes. 
“We’re  able  to  better  communicate  informa¬ 
tion  about  our  products  across  business 
units.  And  from  sales  to  logistics  to  IS, 
we  have  better  visibility,"  she  says. 

UCCnet's  enthusiasts  tout  its  potential 
for  reducing  costly  product  data  errors, 
but  J.R.  Wood  has  so  far  seen  only  a  small 
increase  in  error  detection.  It’s  also  finding 
slow  adoption  among  its  smaller  customers: 

Of  the  200  retailers 
stocking  J.R.  Wood’s 
products,  only  three 
are  so  far  taking 
advantage  of  the 
company’s  UCCnet 
support.  Still,  for  the 
modest  investment 
involved  (J.R.  Wood 
spent  less  than 
$50,000  on  the 
infrastructure  for  its 
UCCnet  link),  Jones 
says  she’s  satisfied 
with  the  returns. 

J.R.  Wood's  invest¬ 
ment  is  on  the  low  side,  says  AMR  Research 
analyst  Kara  Romanow.  For  companies  without 
a  clean,  central  data  repository,  properly 
enabling  EDI  and  UCCnet  support  can  cost 
millions.  And  only  wide-scale  adoption  will  lead 
to  big  savings.  “The  problem  is,  that  hasn't 
really  been  happening.  A  lot  of  companies 
have  been  taking  shortcuts”  that  don’t 
ensure  clean,  reliable  data,  Romanow  says. 

The  next  milestone  is  support 
for  RFID  tagging,  a  technology 
for  tracking  product  units  that 
could  replace  bar  codes.  Wal- 
Mart  already  put  its  top 
100  suppliers  on  notice  that  it 
expects  them  to  begin  RFID 
tagging  shipments  next  year, 


This  Date  in 

IT  History 


Microsoft  Launches 
Windows  95 

Aug.  24, 1995 

What  can  a  market¬ 
ing  campaign  of 
over  $150  million 
buy?  Global 
television  spots  and 
media  coverage 
announcing  your 
new  product. 

Banners  touting  its 

name  from  landmarks  like  Toronto’s  CN  Tower. 
An  official  song  by  the  Rolling  Stones  (Start  Me 
Up).  An  onstage  introduction  of  your  CEO  by 
Tonight  Show  host  Jay  Leno  at  your  company's 
release  celebration.  Lines  at  retail  stores,  with 
shoppers  awaiting  its  midnight  release. 

All  that  and  more  (32-bit  computing!  No  more 
DOS!)  is  part  of  Microsoft’s  eight-language 
launch  of  Windows  95,  its  multitasking  PC 
operating  system. 

"It's  almost  uncontrollable,”  says  early 
Windows  95  tester  Barry  Lynn,  a  then-executive 
vice  president  of  IT  at  Wells  Fargo,  in  an  article 
published  by  The  New  York  Times.  "By  a  yearfrom 
now  it  will  be  our  pervasive  desktop  operating 
system  internally.” 

-Michael  Goldberg 


and  others  in  the  retail  Goliath’s  pipeline, 
like  J.R.  Wood,  are  making  plans  for  it  by 
building  on  earlier  UCCnet  efforts.  “Our 
EDI  and  UCCnet  package  sets  us  up  well 
to  expand  into  RFID,”  Jones  says. 

-Stacy  Cowley 


2  8 


CIO  AUGUST  1,  2004 


www.cio.com 


| 


PHOTO  LEF'^B'  CORBIS:  RIGHT  BY  IDG  NEWS  SERVICES;  BOTTOM  BY  C  SQUARED  STUDIOS/GETTY  IMAGES 


OUR  KNOWLEDGE  OF 
WHAT  CIOs  NEED  GOES  BACK 

-  and  forzvard  - 

A  LONG  WAY . 


■ 


While  the  title  of  CIO  may  not  have  existed  65  years 
ago,  that’s  how  long  Fujitsu  has  been  developing 
innovative  technology  solutions  for  the  world’s 
leading  companies. 

Today,  we're  leveraging  our  multi-billion  dollar 
annual  R&D  budget  to  give  CIOs  the  powerful  new 
enterprise  solutions  they  need  to  automate  even 
the  most  complex  business  infrastructures.  Our 
customers  and  business  units  work  closely  with  our 
research  teams  to  guide  new  product  development. 
This  teamwork  ensures  our  discoveries  make  it  out  of 
the  lab  and  into  the  enterprise. 

Of  course,  there's  a  lot  more  to  a  $45-billion 
company  than  just  R&D.  Our  high-performance  mobile 
computers,  scalable/reliable  servers,  and  managed  and 
professional  services  also  give  CIOs  all  the  tools  they 
need  for  a  world-class  IT  partnership.  For  details  go  to 
us.fujitsu.com/computers  or  call  1-800-83  1-3  183. 

FUJITSU 

THE  POSSIBILITIES  ARE  INFINITE 


PRIMEPOWER  Servers 


LifeBook  Notebooks 


Stylistic’  Tablet  PCs 


PRIM  ERG  Y!  Servers 
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Open  Ear 


If  you  want  to  retain  top  IT  talent,  ask  them  what  they 
like  and  don’t  like  about  your  organization. 

And  then  act  on  it. 

BY  FRED  MAPP 

WHILE  THE  OFFSHORE  outsourcing  of  IT  work  may  dominate  the 
news  in  this  presidential  election  year,  savvy  CIOs  know  that 
the  success  of  their  companies  continues  to  depend  on  top¬ 
flight,  in-house  IT  talent.  In  fact,  there  is  a  general  consensus 
among  CIOs  that  finding  and  keeping  motivated  and  talented 
IT  professionals  these  days  requires  as  much  attention  as  it 
did  during  the  height  of  the  technology  boom  in  the  late  ’90s. 
(For  more  on  this,  read  “The  Vanishing  IT  Department,”  at 
www.cio.com/printlinks.)  Companies  had  trouble  retaining 
workers  during  the  boom  days  because  IT  workers  could  pick 
from  so  many  other  tempting  offers;  today  they  face  a  differ¬ 
ent  challenge. 

Now,  IT  management  has  to  deal  with  the  fear  and  uncer¬ 
tainty  that  many  IT  professionals  are  feeling  as  a  result  of  the 
stampede  toward  offshore  outsourcing.  Even  employees  who 
have  not  lost  their  jobs  thus  far  are  worried  about  the  future. 
And  many  of  them  are  leery  of  continuing  to  work  for  a  com¬ 
pany  that  outsources.  In  addition,  declining  enrollments  in  com- 
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puter  science  programs  indicate  that  it  may  be  harder  to  recruit 
entry-level  IT  workers  in  the  coming  years. 

Throughout  my  career,  I  have  found  retention  and  recruit¬ 
ment  issues  to  be  a  major  source  of  angst  for  IT  organizations. 
When  I  was  CIO  of  AMD,  a  major  semiconductor  manufac¬ 
turer,  I  decided  to  look  at  the  reasons  why  members  of  our  IT 
staff  left  the  company  and  determine  how  we  could  better  iden¬ 
tify,  develop  and  retain  people  within  IT.  The  idea  for  the  study 
emerged  from  a  global  conference  for  the  company’s  IT  man¬ 
agers  that  I  had  organized  to  set  the  overall  direction  for  my 
organization.  Attendees  were  divided  into  teams,  and  each  team 
was  assigned  a  different  initiative  to  pursue.  One  of  the  teams 
was  asked  to  focus  on  the  recruitment,  development  and  reten¬ 
tion  of  world-class  IT  employees.  This  team  (which  consisted  of 
representatives  from  HR  and  various  IT  staff  members)  was 
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tasked  with  investigating  attrition  in  IT  and  developing  reten¬ 
tion  strategies.  They  suggested  a  survey  of  employees  would 
be  a  worthwhile  first  step. 

Shortly  after  the  conference,  this  team  distributed  the  first 
questionnaire  in  a  series  to  employees  who  had  worked  within 
our  IT  department,  resigned  from  the  company  and  later 
returned  to  AMD  to  work  within  IT  again  (in  either  the  same 
position  or  a  different  one).  We  wanted  to  understand  the  cir¬ 
cumstances  that  led  to  the  employees’  resignations  and  also 
why  they  decided  to  return.  In  addition,  exit  data  from  employ¬ 
ees  who  had  left  the  company  was  collected  and  analyzed.  The 
team  also  examined  attrition  and  retention  research  from  var¬ 
ious  sources — such  as  Gartner  and  IDC — to  understand  indus¬ 
try  trends  and  to  compare  our  company’s  IT  turnover  rate  with 
similar  organizations’. 

Any  manager  who  has  endured  an  extended 
recruitment  process  to  fill  a  key  position 
knows  that  it  is  preferable  to  keep  a  talented 
employee  than  to  find  a  new  one. 

The  survey  results  showed  that  employees  liked  the  benefits 
of  the  company’s  philosophies  and  culture  (which  stress  that 
people  come  first  and  profits  will  follow).  This  aspect  was  one 
of  the  main  drivers  in  bringing  former  employees  back.  How¬ 
ever,  we  learned  that  many  had  resigned  in  the  first  place 
because  management  was  not  demonstrating  adequate  leader¬ 
ship — especially  when  communicating  a  vision,  setting  team 
direction  and  helping  employees  understand  how  they  fit  into 
the  company’s  overall  goals. 

The  survey  also  found  that  management  needed  to  ensure 
that  employees  were  enjoying  their  day-to-day  work  and  were 
appropriately  challenged.  (After  all,  employees  who  feel  under¬ 
utilized  and  are  not  continuously  challenged  with  new  proj¬ 
ects  are  likely  to  look  elsewhere  for  employment.)  This  meant 
introducing  new  and  exciting  technologies  that  would  give 
employees  opportunities  to  learn  new  skills.  We  also  realized 
that  a  key  factor  in  retention  is  reinvigorating  relationships 
between  employees  and  their  managers;  there  must  be  regular 
conversations  about  career  development  and  training  to  keep 
employees  engaged  and  challenged. 

Rewards  and  recognition  was  another  area  that  needed  to  be 
addressed,  according  to  the  survey  results.  Providing  employees 
with  competitive  salaries  is  essential,  though  many  employees 
are  motivated  by  things  other  than  money.  Managers  must 
determine  what  form  of  recognition  works  best  for  an  employee 
and  use  it  frequently  to  reward  good  performance. 


How  to  Avoid  Employee  Burnout 

Given  the  success  of  our  first  survey,  we  decided  to  send  another 
one  to  IT  employees  who  had  transferred  into  positions  outside 
of  IT  but  were  still  employed  within  the  company.  Again,  man¬ 
agement  issues  came  through  loud  and  clear.  Specifically,  respon¬ 
dents  said  recognition  and  appreciation  from  management  was 
sorely  lacking.  There  were  also  comments  intimating  that 
employee  burnout  was  directly  related  to  less-than-sensitive  man¬ 
agers  who  didn’t  keep  track  of  their  employees’  workloads.  When 
asked  what  IT  could  do  to  retain  its  employees,  respondents 
overwhelmingly  said  better  management,  improved  leadership 
and  more  respect  for  employees’  contributions  to  the  company. 

The  findings  from  these  surveys  gave  us  invaluable  direc¬ 
tions  for  how  to  address  retention  issues.  In  the  ensuing 
months,  we  established  leadership  development  classes  for  IT 
management  (especially  for  those  who  were  newly  promoted); 
we  enhanced  our  career  development  programs  to  guarantee 
that  employees  are  advised  of  their  performance  and  what  is 
expected  of  them;  and,  of  course,  I  instructed  management  to 
hold  communication  meetings  with  employees  to  provide 
feedback  on  these  findings  and  what  we  were  going  to  do 
about  them. 

We  also  established  a  compensation  strategy  to  ensure  that 
our  pay  is  competitive  and  aligned  with  the  market.  And  we 
implemented  a  process  for  identifying  and  rewarding  major 
contributors  to  the  company,  as  well  as  what  I  call  “on  the 
spot”  awards  for  employees  who  respond  quickly  to  customer 
needs.  We  also  developed  capabilities  for  monitoring  the  success 
of  the  retention  strategy  and  communicating  that  strategy  to  IT 
management  in  quarterly  feedback  sessions. 

Such  tools  can  be  readily  adopted  by  many  companies  to 
keep  employees  happy.  As  companies  continue  to  harness  new 
technologies  to  support  their  business  strategies,  the  need  to 
maintain  a  focus  on  the  retention  of  skilled  IT  professionals 
will  only  increase.  Any  manager  who  has  endured  an  extended 
recruitment  process  to  fill  a  key  position  knows  that  it  is  prefer¬ 
able  to  keep  a  talented  employee  than  to  find  a  new  one.  CIOs 
must  accept  the  responsibility  for  building  the  strategies  and 
programs  that  will  not  only  retain  top  talent,  but  also  will 
provide  the  type  of  environment  where  IT  professionals  can 
flourish  and  make  significant  contributions  to  the  company’s 
overall  success.  BE! 


Fred  Mapp,  who  has  held  key  IT  executive  positions  at  IBM,  American 
Express  and  AMD,  is  now  the  CEO  and  president  of 
the  World  Congress  on  Information  Technology.  He  is 
also  the  author  of  Mapping  Information  Technology  to 
Your  Business,  published  in  July.  His  website  is 
www.mapping-it.com.  Please  send  your  comments  to 
letters@cio.com. 


3  2 


CIO  AUGUST  1,  2004 


www.cio.com 


blackberM 


We  put  a  single  platform,  mobile  data 
and  security  in  your  hands.  Now  you  can 
put  the  enterprise  in  theirs. 


Now  the  BlackBerry®  Enterprise  Solution  allows  your  business 
applications  to  be  accessed  virtually  anywhere*  Whether  it's  email, 
ERP,  CRM  or  document  management  systems,  our  solution  is  built 
on  an  open,  secure  platform  that  can  wirelessly  extend  your  existing 
applications  so  you  won't  have  to  rebuild  or  replace  them.  Best 
of  all,  the  BlackBerry  Enterprise  Solution  is  a  proven  platform, 
deployed  by  tens  of  thousands  of  organizations  around  the  world, 
which  means  wireless  access  to  data  can  be  managed  by  your  IT 
staff  with  more  confidence. 


The  BlackBerry  Enterprise  Solution  Difference 

•  Provides  advanced  security  including  triple  DES 
encryption,  handheld  password  protection, 
wireless  IT  security  commands  and  policies 

•  Includes  server  software,  wireless  handhelds, 
wireless  service  and  support  programs 

•  Provides  flexible  application  deployment  - 
build  in-house  or  with  help  from  an  independent 
software  vendor 

•  Delivers  centralized  manageability  and 
simplified  implementation 


©2004  Research  In  Motion  Limited  (RIM).  All  rights  reserved.  BlackBerry  is  an  end-to-end  wireless  solution  developed  by 
RIM.  RIM,  BlackBerry,  the  BlackBerry  logo  and  the  "envelope  in  motion"  symbol  are  trademarks  or  registered  trademarks 
of  RIM.  "Requires  BlackBerry  Enterprise  Server  software.  Prior  to  subscribing  to  or  implementing  any  third  party  products 
or  services,  it  is  your  responsibility  to  ensure  that  the  airtime  service  provider  you  are  working  with  has  agreed  to  support 
all  of  the  features  of  the  third  party  products  and  services  and  that  you  obtain  the  necessary  licenses.  RIM  makes  no 
representation,  warranty  or  guarantee  whatsoever  in  relation  to  the  third  party  products  and  services  and  RIM  assumes  no 
liability  whatsoever  in  relation  to  the  third  party  products  and  services  even  if  RIM  has  been  advised  of  the  possibility  of 
such  damages  or  can  anticipate  such  damages. 


BLACKBERRY 


www.BlackBerry.com/go/enterprise 


If  we  hired  every 
electrician  in  the 
United  States,  we 
wouldn't  have  enough 
people  to  staff 
our  electrical 
departments," 
says  Home  Depot 
CIO  Bob  DeRodes. 
“That’s  how 
big  we  are.” 


PHOTO  BY  STEVEN  VOTE 


Cover  Story 


Home  Depot  is  investing  nearly  $1  billion 

in  IT  infrastructure  as  part  of  a  massive  modernization  effort. 
The  retailer  is  betting  the  move  will  help  accelerate  growth 

and  earnings  and  beat  back  its  prime  competitor,  Lowe’s. 
But  can  a  strategy  designed  to  improve  efficiency  in  a  mammoth 
corporation  also  increase  customer  satisfaction? 
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1PROVEMENT 


BY  MERIDITH  LEVINSON 


Reader  ROI 

►  Why  growth  and  home¬ 
grown  apps  proved 
incompatible 

►  A  project  portfolio  for 
improving  customer 
service 

►  The  competitive  pros 
and  cons  of  infrastruc¬ 
ture  investments 


Bernie  Marcus  and  Arthur  Blank  tapped  into  Amer¬ 
ica’s  love  for  size,  choice  and  bargains  when  they 
envisioned  a  chain  of  retail  warehouses  stacked  floor 
to  ceiling  with  everything  and  anything  a  builder  or 
homeowner  could  want  or  need.  In  1 978,  The  Home 
Depot  was  born.  At  last,  men  could  experience  the 
same  sense  of  wonder  that  overcomes  kids  let  loose 
in  Toys  “R”  Us. 

With  its  then-unusual,  big-box  format  and  its 
knowledgeable,  helpful  clerks  clad  in  construction- 
sign-orange  aprons,  Home  Depot  rapidly  became 
an  icon  of  American  culture  alongside  Harley- 
Davidson,  Coca-Cola  and  Ford. 
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Retail  IT 


It  also  became  an  icon  of  American  busi¬ 
ness.  By  1986,  with  60  stores  and  6,600  em¬ 
ployees,  Home  Depot  reached  a  billion  dollars 
in  sales.  From  then  until  2000,  revenue  nearly 
doubled  every  two  to  three  years.  The  com¬ 
pany’s  success  coincided  with  the  increasing 
suburbanization  of  middle-class  America,  the 
nesting  of  the  baby  boomers,  the  real  estate 
boom  of  the  1 980s  and  the  popularity  of  the 


wide  implementations.  In  addition,  a  stan¬ 
dard  database  design  and  an  application 
architecture  that  reused  software  compo¬ 
nents  allowed  the  IT  staff  to  develop  applica¬ 
tions,  such  as  the  company’s  mobile  ordering 
system  (a  cart  equipped  with  a  computer  and 
printer  that  clerks  could  wheel  around  the 
store  to  reorder  products  and  change  prices), 
lickety-split. 


increased  competition  from  its  closest  rival, 
Lowe’s,  which  was  aggressively  expanding. 
At  a  time  when  Home  Depot  should  have 
been  prospering  (with  mortgage  rates  reach¬ 
ing  historic  lows),  at  a  time  when  con¬ 
sumers — scarred  by  the  9/1 1  attacks — were 
spending  more  time  at  home,  the  company 
went  into  a  tailspin.  For  1 0  straight  quarters, 
from  the  second  quarter  of  fiscal  2001 


THE  I.T.  THAT  GOT  HOME  DEPOT 


to  its  first  $50  billion  won’t  get  it  to  its  next, 

say  CEO  Robert  Nardelli  and  CIO  Bob  DeRodes. 


TV  sitcom  Home  Improvement.  Home 
Depot  was  the  right  idea  arriving  at  the  right 
time.  In  1989,  it  surpassed  the  then-37-year- 
old  Lowe’s  as  America’s  number-one  home 
improvement  retailer.  Today,  the  company  is 
America’s  second  largest  retailer  (trailing  only 
Wal-Mart)  and  the  biggest  home  improve¬ 
ment  chain  in  the  world,  with  $64. 8  billion  in 
revenue  and  1 1  percent  of  the  vaguely  defined 
U.S.  home  improvement  market.  The  com¬ 
pany  opens  a  new  store  somewhere  almost 
every  other  day. 

What  helped  fuel  Home  Depot’s  dizzying 
growth  (besides  a  historic  economic  boom) 
was  a  decentralized  business  model  that  made 
store  regional  and  division 
managers  responsible  for  the 
mix  and  quantity  of  the  prod¬ 
ucts  on  their  shelves.  Marcus 
and  Blank  believed  that  the 
people  closest  to  the  customer 
ought  to  be  making  those  crit¬ 
ical  choices,  not  the  muckety- 
mucks  at  headquarters. 

IT  also  played  a  significant 
role.  Home  Depot  relied  heav¬ 
ily  on  homegrown  systems.  By 
building  its  own  applications, 
it  didn’t  get  bogged  down  in 
customizing  off-the-shelf  soft¬ 
ware  and  didn’t  invest  time  and 
money  in  endless  enterprise- 


But  the  glory  days  didn’t  last.  As  the  mil¬ 
lennial  malaise  set  in  across  the  country,  Home 
Depot  faltered.  The  entrepreneurial  strategies 
of  the  ’80s  and  ’90s  suddenly  began  to  look 
old-fashioned.  With  more  than  1,000  stores 
in  the  United  States,  Canada,  Puerto  Rico  and 
South  America,  local-level  decision  making 
had  led  to  a  hodgepodge  of  store  layouts,  con¬ 
fusing  customers  who  shopped  at  different 
Home  Depots  and  wanted  to  find  the  same 
product  in  the  same  place  in  each  store.  The 
systems  on  which  Home  Depot  prided  itself 
became  too  costly  for  the  chain  to  support 
because  they  required  so  much  elbow  grease 
to  change.  Even  the  warehouse  format  that 
was  so  closely  tied  to  Home 
Depot’s  identity  was  showing 
wear  and  tear.  As  Lowe’s,  Tar¬ 
get,  Wal-Mart  and  warehouse 
clubs  added  stores,  Home 
Depot  became  just  another  big 
box  on  the  increasingly  homog¬ 
enized  American  retail  land¬ 
scape.  The  thrill  was  gone. 

When  Robert  Nardelli  took 
over  as  CEO  in  December 
2000,  he  made  some  dramatic 
changes — including  the  cen¬ 
tralization  of  merchandising, 
store  planning  and  market¬ 
ing — that  shook  up  the  com¬ 
pany.  Home  Depot  also  faced 


through  the  third  quarter  of  fiscal  2003, 
same  store  sales  and  net  earnings  growth 
paled  in  comparison  with  Lowe’s  (see  “Why 
Home  Depot  Is  Worried,”  Page  38).  Home 
Depot’s  stock  dropped  from  $67  in  Decem¬ 
ber  1999  to  $20  in  January  2003.  And 
Lowe’s  customer  satisfaction  ratings  from 
the  American  Customer  Satisfaction  Index 
were  higher  than  Home  Depot’s  for  both 
2002  and  2003. 

Something  had  to  be  done. 

The  question  was,  what? 

Home  Depot’s  answer  was  infrastructure, 
infrastructure  and  more  infrastructure. 

A  Billion-Dollar  Bet  on  IT 
Infrastructure 

Now  more  than  25  years  old,  Home  Depot  is 
going  through  a  late  adolescence.  CEO 
Nardelli  and  CIO  Bob  DeRodes,  who  joined 
the  company  in  February  2002,  assert  that  the 
company  has  outgrown  its  homegrown  sys¬ 
tem;  the  IT  that  got  it  to  its  first  $50  billion 
won’t  get  it  to  its  next.  New  technology  is 
needed  to  support  the  company’s  expansion 
and  improve  store  operations  and  customer 
service  (not  to  mention  compete  with  Lowe’s, 
the  bogeyman  across  the  street).  To  that  end, 
Home  Depot  in  2002  announced  an  almost 
$1  billion  overhaul  of  its  IT  infrastructure.  The 
move  is  part  of  a  massive,  $7.7  billion  mod¬ 
ernization  effort  that  includes  remodeling 


Taking  over  in  2000, 
CEO  Robert  Nardelli 
believed  that  Home 
Depot  had  outgrown 
its  homegrown  sys¬ 
tems  and  needed  new 
IT.  He  gave  his  CIO 
carte  blanche. 
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1,635 
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Products  carried 
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40,000+ 


147,000 


$64.8  billion 

2003  revenue 

$30.8  billion 
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2003  IT  spending 

$275  million 

$300  million 

$80.7  billion 

Market 
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$41.7  billion 
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Frame  relay 
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satellite-based  WAN 
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existing  stores  and  opening  new 
ones.  The  transformation  involves 
replacement  of  its  more  than  10- 
year-old  point  of  sale  (POS)  system, 
including  the  installation  of  self¬ 
checkout  counters  (completed  in 
2003);  a  LAN  upgrade;  an  IBM 
data  warehouse  for  sales  and  labor 
management,  which  was  launched 
in  late  2002;  price  optimization 
software  from  ProfitLogic;  SAP 
financials  (went  live  in  the  end  of 
May  2004);  PeopleSoft  ERP  (went 
live  in  February  2004);  two-way 
cordless  scan  guns  (rolled  out  in 
April  2004);  and  other  new  appli¬ 
cations  designed  to  streamline  price 
check  and  receipt  lookup  services. 

While  Wall  Street  largely  has 
applauded  Home  Depot’s  IT  ini¬ 
tiatives  (along  with  its  recent  sales 
and  earnings  growth),  not  every¬ 
one  is  convinced  that  it’s  out  of  the 
woods.  In  her  February  assessment 
of  the  company,  Barbara  Allen,  an 
equity  analyst  with  broker-dealer 
Natexis  Bleichroeder,  wrote,  “We 
remain  concerned  about  execution 
risk  and  competitive  pressures  dur¬ 
ing  Depot’s  dramatic  internal 
changes.”  She  warned  investors  not  to  get 
too  excited  about  Home  Depot’s  recent  com¬ 
parable  store  sales  growth,  which  was  an 
important  factor  influencing  analysts  from 
Buckingham  Research  and  Smith  Barney  to 
give  Home  Depot  strong  buy  ratings.  Allen 
noted  that  the  fourth  quarter  fiscal  2003 
growth  figures  were  flashy  only  when  com¬ 
pared  to  the  previous  year’s  dismal  results. 

And  George  Whalin,  president  of  Retail 
Management  Consultants,  doesn’t  accept 
Home  Depot’s  assertion  that  all  this  tech¬ 
nology  will  improve  customer  service.  In  his 
view,  the  company  is  using  technology  to 
eliminate  workers  and  cut  labor  costs, 
thereby  improving  profit  margins.  “Home 
Depot  built  their  reputation,  they  built  their 
business,  on  a  customer  being  able  to  talk  to 
a  plumber  or  an  electrician  or  someone  who 
could  answer  questions  for  them,”  says 


Whalin.  “That’s  not  the  case  today.  They’re 
running  these  stores  with  fewer  people  than 
they’ve  ever  run  them  with.”  (In  fact,  based 
on  a  review  of  the  company’s  annual  reports, 
Home  Depot  went  from  200  associates  per 
store  in  2000  to  175  associates  per  store  in 
2003.)  Indeed,  CIO  DeRodes  says  that  with 
the  new  self-checkout  lanes,  “One  person 
can  effectively  clear  four  lanes  much  more 
efficiently,  and  that  reflects  in  the  cost  of 
business.” 

Ultimately,  says  Whalin,  “their  ability  to 
distinguish  their  stores  [from  their  com¬ 
petitors]  is  going  to  be  badly  damaged  the 
more  they  go  to  this  model  of  more  tech¬ 
nology  and  little  in  the  way  of  service.” 

It’s  a  retailing  truism:  Strategies  that 
improve  the  bottom  line  and  inspire 
investor  confidence  don’t  always  make  cus¬ 
tomers  happy. 


Fixing  the  Crunch  at 
the  Registers 

Self-checkout  stations  were  in¬ 
stalled  in  2003  in  over  800  stores  to 
improve  customer  service  by  (theo¬ 
retically)  shortening  lines  and  wait 
times,  and  getting  employees  who 
would  otherwise  be  working  regis¬ 
ters  onto  the  sales  floor.  That  line¬ 
shortening  strategy  doesn’t  appear 
to  be  working  here  at  store  #2669 
in  Natick,  Mass.,  which  is  mobbed 
on  a  warm  Saturday  in  spring,  the 
home  improvement  retailers’ 
Christmas  season.  In  the  outdoor 
garden  center,  lines  nine  customers 
deep  form  at  the  two  open  check¬ 
out  lanes;  people  pushing  flatbed 
shopping  carts  stacked  with  bags 
of  mulch  and  potting  soil  can 
barely  squeeze  past  each  other  in 
the  narrow  aisles;  a  male  customer 
helps  a  woman  load  some  of  those 
heavy  bags  of  soil  onto  her  cart 
because  Home  Depot  employees 
are  too  busy. 

Inside  the  store,  only  four  out  of 
1 0  cash  registers  are  open;  one  of  the 
four  self-checkouts  is  out  of  service. 
The  lines  are  long.  The  store,  in  its 
busiest  season,  seems  understaffed. 

Still,  self-checkout  has  reduced  wait  time 
by  one-third  across  Home  Depot  stores, 
according  to  the  company.  John  Simley,  a 
former  spokesman  for  Home  Depot,  says 
opening  registers  is  an  inefficient  use  of  labor 
and  argues  that  it  can  take  1 0  minutes  to  open 
one  up. 

To  address  the  staffing  issue  before  the  lines 
start  to  form.  Home  Depot  in  2002  launched 
a  48  terabyte  IBM  DB2  data  warehouse  that 
runs  on  new  Regatta  p690  servers  and  con¬ 
tains  three  years  of  sales  history.  The  ware¬ 
house  is  intended  to  take  the  guesswork  out  of 
labor  scheduling  as  well  as  inventory  planning. 
Fowe’s  has  had  a  Teradata  warehouse  with 
that  functionality  since  2000.  Steven  Baum- 
garten,  a  research  analyst  with  Parker/Hunter, 
says  not  having  such  a  warehouse  put  Home 
Depot  at  a  competitive  disadvantage. 
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Why  Home  Depot  Is  Worried 


From  the  second  quarter  of  fiscal  2001 
through  the  third  quarter  of  fiscal  2003, 
Lowe’s  net  earnings  growth  outpaced 
Home  Depot’s 


Net  Earnings  Growth 


2001 


2002 


2003 


DcRodes  says  that  while  the 
company  has  improved  its  ability  to 
mark  down  merchandise  and  man¬ 
age  its  margins,  he  couldn’t  quan¬ 
tify  the  data  warehouse’s  ROI.  “It’s 
hard  to  say  the  new  merchandising 
approach  added  this  percent  and 
the  technology  added  that  percent 
[to  the  bottom  line].  We  don’t  make 
ourselves  crazy  [determining  those 
numbers]  as  long  as  we’re  making 
the  right  progress.  Our  numbers  are 
all  moving  in  the  right  direction  as 
a  company,  so  we  know  these  tools 
are  helping,”  he  says. 

DeRodes  also  replaced  Home 
Depot’s  ancient  green-screen  POS 
system  with  color,  touch-screen, 
Web-based  POS  terminals  from 
NCR  to  move  customers  through 
checkout  more  quickly.  The  up¬ 
grade  of  the  company’s  five  highly 
customized  POS  systems  to  the 
NCR  terminals  cost  tens  of  millions 
of  dollars,  according  to  DeRodes. 

He  says  the  new  registers  have  decreased  the 
average  time  it  takes  a  customer  to  check  out 
from  6.7  minutes  to  4.9  minutes. 

“This  system  will  give  us  better  metrics  on 
cashier  performance,”  says  DeRodes.  “That’s 
important  because  we  want  to  train  cashiers 
who  aren’t  performing  as  well.”  By  using 
analytical  software  to  study  the  number  of 
items  in  each  customer’s  purchase,  the  type 
of  items  (are  they  heavy  and  cumbersome 
such  as  lumber  or  bags  of  cement?),  and  the 
time  it  takes  the  cashier  to  process  the  order, 
the  company  can  identify  if  an  individual 
cashier  is  unusually  slow  and  needs  more 
training  on  the  register. 

A  Project  Portfolio  to  Speed 
Customers  on  Their  Way 

Store  #121  sits  diagonally  across  the  street 
from  Home  Depot’s  Atlanta  headquarters. 
This  is  where  the  company  is  piloting  a  bunch 
of  new  applications  collectively  known  as 
FAST  (front-end  accuracy  and  service  trans¬ 
formation)  intended  to  improve  cashier  accu¬ 
racy  and  enhance  customer  service.  The  other 


purpose  of  the  FAST  projects,  according  to 
John  Beasley,  Home  Depot’s  former  director 
of  operations  strategy,  is  to  close  or  even 
leapfrog  the  technology  gap  between  Home 
Depot  and  other  retailers  like  Wal-Mart  and 
Target.  Two  FAST  applications  that  will  be 
rolled  out  to  stores  this  year  are  an  electronic 
product  catalog,  called  Online  UPC,  and  an 
online  receipt  lookup  service  that  will  be  in 
stores  this  month. 

Online  UPC.  This  is  essentially  an  elec¬ 
tronic  catalog  of  products  that  don’t  have  bar 
codes  on  them — such  as  nuts  and  bolts,  bales 
of  hay  and  drywall — and  therefore  can’t  be 
scanned  at  the  POS.  The  application  runs  on 
the  POS  system  and  is  intended  to  replace 
three-ring  binders  filled  with  pictures  of  prod¬ 
ucts,  their  bar  codes  and  stock-keeping  unit 
(SKU)  numbers  that  every  cashier  has  at  his 
register.  Online  UPC  will  make  determining 
prices  on  unmarked  items  easier  for  cashiers. 
Beasley  says  that  while  only  about  3  percent  of 
transactions  require  the  electronic  catalog,  the 
application  will  save  23  seconds  of  customer 
wait  time  per  product  over  the  binder — not 


an  inconsiderable  amount  of  time 
when  one  imagines  a  customer 
twiddling  her  thumbs  while  a 
cashier  runs  a  price  check. 

Online  receipt  lookup.  This  lets 
customers  who’ve  paid  for  mer¬ 
chandise  using  a  credit  card,  debit 
card  or  check  return  an  item  even  if 
they’ve  lost  or  forgotten  their 
receipt.  When  the  customer’s  card  is 
swiped,  or  his  checking  account 
number  entered  into  the  POS,  the 
application  searches  through  90 
days  of  transactions  to  find  an  elec¬ 
tronic  copy  of  the  customer’s 
receipt.  This  should  also  help  the 
company  cut  down  on  fraudulent 
returns,  which  cost  the  retail  indus¬ 
try  millions  each  year. 

Wireless  scan  guns.  The  com¬ 
pany  is  in  the  process  of  replacing 
its  corded  scan  guns  with  wireless 
ones  that  cashiers  can  use  to  ring  up 
merchandise  and  that  workers  on 
the  floor  can  use  to  check  inventory. 
Although  some  supermarket  chains  and 
wholesale  clubs  such  as  Albertsons,  B.J.’s  and 
Sam’s  use  cordless  guns  already,  what  makes 
Home  Depot’s  unique  is  their  two-way  com¬ 
munication  feature.  For  example,  when  a 
cashier  scans  the  UPC  for  a  barbecue  grill  at 
the  checkout,  the  gun  transmits  the  SKU  num¬ 
ber  to  the  point  of  sale  system.  Using  business 
rules,  the  POS  identifies  the  product  and 
whether  it  requires  assembly,  and  sends  a  mes¬ 
sage  back  to  a  small  screen  on  the  gun  prompt¬ 
ing  the  cashier  to  ask  the  customer  whether  he 
wants  Home  Depot  to  assemble  the  grill  for 
him  for  an  additional  charge.  (DeRodes  says 
he  doesn’t  yet  have  numbers  on  the  amount 
of  money  Home  Depot  has  made  through 
cross-selling  opportunities  identified  by  the 
gun,  but  says  the  scanner  has  paid  for  itself  on 
the  basis  of  checkout  accuracy  alone.)  The 
maintenance  costs  for  the  wireless  guns  will 
also  be  lower  than  they  were  for  the  corded 
guns,  according  to  Ray  Allen,  Home  Depot’s 
former  director  of  store  systems,  who  worked 
on  the  FAST  projects  with  Beasley. 

Web-based  kiosks.  One  of  the  more  gee- 
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whiz  technologies  the  company  rolled  out  in 
mid-2003  is  its  color  solutions  centers.  These 
Web-based  kiosks  in  the  paint  department 
help  customers  color-coordinate  the  rooms 
they’re  decorating.  The  kiosks  contain  a  com¬ 
puter,  a  touch-screen  monitor  and  a  lens  used 
to  scan  fabric,  upholstery,  rug  or  wallpaper 
swatches.  Following  prompts  on  the  screen,  a 


isfaction  numbers.” 

It  may  seem  that  Home  Depot  under 
Nardelli  and  DeRodes  is  distancing  itself  from 
its  past  by  saying  the  old  infrastructure  won’t 
support  the  company’s  new  business  and 
expansion  plans  and  that  the  IT  needs  to  be 
replaced.  In  fact,  a  lot  of  what  they’re  doing — 
including  the  kiosks,  the  wireless  scan  guns 


Home  Depot,  says  Home  Depot  always  felt 
that  its  business  and  operations  were  so 
unique  that  no  packaged  application  could 
provide  the  stores  with  what  they  needed 
without  huge,  expensive,  drawn-out  cus- 
tomizations.  But  as  the  company  grew, 
building  systems  in-house  became  less  cost- 
effective.  As  Home  Depot  saturated  markets 


IT’S  A  RETAILING  TRUISM:  strategies 


that  improve  the  bottom  line  and  inspire  investor  confidence 

don’t  always  make  customers  happy. 


customer  holds  a  swatch  against  the  lens,  and 
then  the  computer  prints  out  a  selection  of 
matching  paint  colors.  The  customer  can 
have  Home  Depot  mix  paints  according  to 
the  colors  on  the  printout.  DeRodes  says  it’s 
difficult  to  pinpoint  how  much  sales  of  the 
company’s  Behr  brand  of  paint  are  driven  by 
the  kiosks,  but  he  says  that  customers  tell 
Home  Depot  that  the  kiosk  plays  a  positive 
role  in  their  shopping  experience. 

E-Learning.  “If  we  hired  every  certified 
electrician  in  the  United  States,  we  wouldn’t 
have  enough  people  to  staff  our  electrical 
departments,”  says  DeRodes.  “That’s  how 
big  we  are.  When  you  get  to  this  scale,  you 
can’t  rely  on  the  retired  electri¬ 
cian  to  stand  in  the  aisle.  We 
have  to  train  the  people.”  To 
that  end,  Home  Depot  rolled 
out  Web-based  training  courses 
for  its  299,000  store  employees 
in  2003  and  delivered  23  mil¬ 
lion  hours  of  Web-based  train¬ 
ing  last  year.  The  e-learning 
courses  are  delivered  via  dedi¬ 
cated  PCs  located  in  stores. 

They  cover  everything  from 
basic  sales  and  customer  serv¬ 
ice  skills  to  specialized  product 
and  brand  knowledge.  De¬ 
Rodes  maintains  e-learning  is 
“paying  tremendous  dividends 
in  terms  of  higher  customer  sat- 


and  the  mobile  ordering  system — continues 
plans  conceived  by  Ron  Griffin,  DeRodes’ 
predecessor. 

A  New  IT  Strategy  to  Meet 
the  Competition 

Because  individual  Home  Depots  were 
responsible  for  keeping  track  of  which  prod¬ 
ucts  sold  or  did  not  sell,  as  well  as  determining 
how  to  attract  and  retain  customers,  the  com¬ 
pany  needed  systems  throughout  the  ’80s  and 
’90s  to  help  managers  make  these  decisions. 
To  that  end,  and  to  support  the  company’s 
expansion,  former  CIO  Griffin  introduced  in 
the  early  1990s  a  corporate  data  model  and 
an  application  architecture 
based  on  a  set  of  reusable  soft¬ 
ware  components.  The  com¬ 
ponents  represented  different 
kinds  of  commands  or  func¬ 
tionalities,  such  as  inventory 
checks  and  price  changes,  that 
could  be  plugged  into  new 
applications.  This  component- 
based  application  architecture 
allowed  the  IT  department  to 
create  applications  quickly, 
without  having  to  rewrite  a  lot 
of  code. 

Michael  Starr,  who  is  CIO  of 
software  provider  Agilisys  and 
former  senior  manager  of 
application  development  at 


with  stores,  sales  growth  at  individual  stores 
began  to  slow.  As  a  result,  says  a  former 
Home  Depot  vice  president,  the  amount  of 
technology  and  manpower  that  Home  Depot 
could  afford  diminished.  “You  started  to  see 
a  need  for  a  less  costly  organizational  and  sys¬ 
tems  infrastructure,”  he  says. 

Accordingly,  Griffin  began  embracing  a 
strategy  that  relied  more  on  packaged  appli¬ 
cations.  In  1999,  he  announced  that  Home 
Depot  would  implement  SAP  financials  in 
South  America  and  later  in  the  United  States 
and  Canada  to  replace  its  aging  financial  sys¬ 
tem.  When  Nardelli  took  over  as  CEO  in 
December  2000,  the  move  to  packaged  appli¬ 
cations  became  even  more  pronounced.  Grif¬ 
fin  (who,  citing  nondisclosure  agreements, 
declined  to  be  interviewed  for  this  story) 
announced  in  November  200 1  that  he’d  leave 
the  company  by  the  first  of  the  new  year,  and 
many  of  the  projects  he’d  announced,  such  as 
the  North  American  SAP  implementation,  in¬ 
store  kiosks  and  wireless  scan  guns,  were  post¬ 
poned  until  Nardelli  found  a  successor.  When 
DeRodes  took  over  IT  in  early  2002,  he  had 
Nardelli’s  blessing  to  do  whatever  was  needed 
to  get  the  company  back  on  track,  and  Home 
Depot’s  IT  department  started  to  change.  For¬ 
mer  Director  of  Store  Systems  Allen  says  the  IT 
department  under  Griffin  was  less  strategic  and 
more  reactive  to  store  needs.  He  says  this  was  a 
result  of  being  constrained  by  the  company’s 
infrastructure  and  its  freewheeling  operations. 


Former  CIO  Ron 


Griffin  introduced  an 
architecture  based  on 
a  set  of  reusable  soft¬ 
ware  components  that 
allowed  IT  to  create 
applications  quickly, 
without  having  to 
rewrite  a  lot  of  code. 
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Home  Is  Where  the  Money  Is 


Top  five  companies  in  the  home  improvement  industry, 
ranked  by  market  capitalization 


SOURCE:  RetaMNet,  May  18,  2004 


Former  Director  of  Operations  Strategy 
Beasley  says,  ‘i  thinkthecurrentgroupinIT 
is  both  more  willing  to  tackle  big  transfor¬ 
mational  change  and  moving  more  to  part¬ 
ner  much  better  with  the  business.” 

X  High-Tech  Vs.  High-Touch 

Along  with  the  IT  group,  the  notion  of  what 
constitutes  good  service  has  also  changed.  For 
years,  good  service  at  Home  Depot  meant 
high-touch  service — employees  interacting 
with  customers.  Now  it  means  self-service.  In 
the  old  days  (which  Home  Depot  employees 
refer  to  as  the  pre-Nardelli  days),  if  a  customer 
entered  a  store  and  wanted  to  know  where  to 
find  drain  pipe  fittings,  an  employee  would 
walk  him  to  the  aisle  and  shelf.  This  is  part  of 
the  reason  why  Home  Depot  had  few  signs  in 
its  stores,  says  Simley.  But  Nardelli  decreed 
that  a  thousand  signs  should  bloom.  Better 
signs,  he  believed,  would  be  a  cheap,  non¬ 
labor-intensive  way  for  the  company  to  move 
customers  in  and  out  quickly  and  to  make 
those  cavernous  spaces  seem  less  bewildering, 
especially  for  the  female  customer  who  Home 
Depot  was  trying  to  attract  in  response  to 
Lowe’s  successful  appeal  to  women. 

Today,  Ray  Allen  says  Home  Depot  gets 
high  marks  if  customers  can  find  things  on 
their  own  (thanks  to  signs)  and  scan  them  on 
their  own  (thanks  to  self-checkout),  without 
having  to  interact  with  a  salesperson.  “Service 
used  to  mean  whether  I  can  get  an  associate  to 
help  me.  Now  service  means  I  can  do  it 
myself,”  he  says. 

But  is  self-service  the  same  thing  as  good 
service?  Retail  Management  Consultants’ 
Whalin  begs  to  differ.  If  Home  Depot’s  goal  is 
to  get  customers  in  and  out  of  stores  without 
ever  having  to  speak  with  a  clerk,  says 
Whalin,  “then  Lowe’s  is  going  to  continue  to 
hand  them  their  head.” 

With  the  possible  exception  of  the  two-way 
wireless  scan  guns  that  allow  employees  to 
cross-sell  merchandise  to  customers,  the  tech¬ 
nologies  Home  Depot  is  installing  in  its  stores 
are  not  high  on  the  personal  touch.  Lowe’s  is 
currently  trying  to  differentiate  itself  from 
Home  Depot  on  high  touch.  A  big  sign  above 
the  entrance  to  the  Lowe’s  store  in  Saratoga 


Springs,  N.  Y. ,  reads,  “  Lots  of  stuff  by  yourself? 
We’ll  load  it.  ”  Another  sign  reads:  “More  than 
three  in  line?  We’ll  open  another  checkout.” 

Which  is  not  to  suggest  that  Lowe’s  isn’t 
increasingly  using  technology  as  well.  At  an 
investor  conference  in  September  2003, 
Lowe’s  announced  it  would  begin  installing 
self-checkout  this  year.  And  during  2003, 
Lowe’s  created  an  electronic  product  catalog 
and  links  to  its  vendors  through  EDI  inter¬ 
faces.  By  automating  the  order-taking 
process,  the  company  says  it  has  reduced 
errors  and  the  length  of  time  customers  have 
to  wait  to  receive  their  orders. 

Striking  the  Right  Balance 

The  surest  way  for  Home  Depot  to  improve  its 
earnings  growth,  market  share  and  stock  price 
is  to  move  more  products  more  quickly 
through  more  stores  with  fewer  associates  and 
lower  overhead  than  in  the  past.  The  ability 
to  do  that  hinges  on  increased  efficiency — but 
also  a  better  shopping  experience  for  cus¬ 


tomers.  Better  store  layouts,  more  signs  and 
brighter  lighting  will  help,  and  technology  can 
too.  While  Home  Depot  is  using  more  pack¬ 
aged  software,  the  IT  department  still  does 
plenty  of  application  development  in  house, 
particularly  for  customer-facing  technologies 
like  Online  UPC  and  receipt  lookup.  “Every 
time  we  help  a  customer,  satisfaction  goes  up 
and  so  do  sales,”  says  DeRodes. 

Conversely,  every  time  a  customer  even 
thinks  he  or  she  needs  to  talk  to  a  knowledge¬ 
able  person  and  can’t  find  one,  satisfaction 
plummets.  The  most  critical  thing  Home 
Depot  needs  to  get  right  is  to  drive  efficiency 
while  enhancing  the  customer  experience — 
and  these  two  things  don’t  always  go  together. 
With  Lowe’s  hot  on  its  heels,  Home  Depot’s 
home  improvement  effort  has  got  to  be  a 
home  run.  HEI 


Senior  Writer  Meriditb  Levinson  writes  frequently 
on  the  retail  industry.  E-mail  your  feedback  to 
mlevinson@cio.com. 
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HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you'll  save. 


Save  over  30%  with  our  blade  bundle  featuring  two  HP  ProLiant  BL20p  Blade  Servers,  powered  by  Intel®  Xeon™  processors,  and  get  the 
power  to  make  network  management  simple  and  affordable.  You'll  save  on  deployment  time  too,  thanks  to  this  ready-to-go  package. 
Sure,  modular  design  leaves  room  to  expand  later,  but  HP  Blade  Servers  can  also  make  a  big  impact  on  your  total  cost  of  ownership  in 
the  meantime.  Our  management  software  boosts  productivity  and  cuts  reconfiguration  efforts  from  days  to  minutes.  And  because  your 
time  is  money,  the  BL20p  features  fully  redundant  technologies  to  reduce  costly  downtime.  While  our  #1  ranking  in  lnte!®-based,  server- 
customer  satisfaction  is  one  reason  we  recently  became  the  first  to  sell  over  100,000  blade  servers,  there's  more  than  one  reason.  You 
also  get  the  advice  and  support  of  HP  and  our  local  partners— well  before  and  long  after  you  buy.  Even  when  you  buy  at  more  than  30%  off. 


Save  33% 

Get  the  HP  ProLiant  BL20p  bundle, 
and  you'll  save  big  compared  to 
the  cost  of  buying  the  two  servers 
and  accessories  separately. 


HP  ProLiant  BL20p 
BLADE  SERVER  BUNDLE 

tfQ  Lease  for  as  low  as 

/  /  $375  a  month’ 

•  (2)  BL20p  Blade  Servers 
Each  Blade  Server  includes: 

-  (2)  Intel’  Xeon™  processors  3.06GHz-512k 

-  (3)  10/100/1000  NICs  +  (1)  10/100  iLO  NIC 

-  1GB  DDR  memory2 

•  p-Class  blade  enclosure 

•  p-Class  single  phase  power  enclosure 
with  2  power  supplies 

•  Mini  bus  bar  kit 

•  (8)  Rapid  Deployment  Pack  licenses 


Download  information  about  HP  Blade  servers. 

Read  a  white  paper  highlighting  total  cost  of  ownership  and  the 
Factiva  and  iSource  case  studies  demonstrating  ROI. 


CALL 

1-877-726-8113 

CLICK 

hp.com/go/blades3 

visit  your  local  HP  reseller 


Otter  available  when  bought  direct  from  HP  or  from  participating  authorized  resellers.  Prices  shown  are  HP  direct  prices;  reseller  and  retailer  prices  may  vary.  Prices  shown  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  taxes  or  shipping  to  recipient's 
destination.  HP  is  not  liable  for  editorial,  pictorial  or  typographical  errors  in  this  advertisement.  Photography  may  not  accurately  represent  exact  configurations  priced.  Offers  cannot  be  combined  with  any  other  offer  or  discount  and  are  good  while  supplies  last.  Limited  order  quantities. 
Promotions  void  where  prohibited  or  restricted  by  law.  Implicit  lease  rate,  assuming  lessee  does  not  exercise  a  fair-market-value  purchase  option  at  the  end  of  the  lease  term  and  timely  returns  the  leased  equipment  to  Hewlett-Packard  Financial  Services  Corporation  (HPFSC)  at  the 
end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes,  fees  and  shipping  charges).  Lease  products  available  through  HPFSC  to  qualified  commercial  customers  in  the  U.S.  and  subject  to  credit  approval  and  execution  of  standard 
HPFSC  documentation.  Other  restrictions  may  apply.  HPFSC  reserves  the  right  to  change  or  cancel  this  program  at  any  time  without  notice.  For  more  information,  call  1  -888-277-5942.  For  hard  drives,  GB=billion  bytes.  Certain  warranty  restrictions  and  exclusions  may  apply.  For 
complete  warranty  details,  call  1  -800-345-1 51 8  (U.S.).  Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  ©2004  Hewlett-Packard  Development  Company,  L.P. 


Your  guide  to  the  past,  present  and  future  of  the  legal  challenge  that  may 
change  the  face  of  the  open-source  revolution 


It  began  with  a  simple  asset 

inventory.  In  June  2002,  President  and  CEO 
Dari  McBride  joined  SCO,  and,  looking  for 
ways  to  turn  around  his  fizzling  little 
Unix/Linux  company,  it  dawned  on  him 
that  SCO  owned  something  valuable: 
the  Unix  System  V  source  code. 

At  first,  SCO  planned  to  use  its 
Unix  source  code  to  allow  old  Unix 
apps  to  run  on  the  new  Linux  oper¬ 
ating  system.  In  fact,  according  to 
Chris  Sontag,  SCO  senior  vice  presi- 
r  dent  and  general  manager  of  the  com¬ 
pany’s  licensing  division,  SCO  even  briefed 
analysts  on  this  strategy. 

In  the  meantime,  some  Linux  users  had  taken  it  upon 
themselves  to  use  SCO’s  Unix  software  to  run  Unix  apps  on 
Linux,  which  was  illegal  for  anyone  but  SCO  to  do  under  its 
Unix  license.  SCO  devised  a  plan  to  allow  these  users  to  do  so 
legally  through  a  new  license. 

But  before  SCO  started  offering  the  new  licenses,  IBM  took 
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the  wind  out  of  SCO’s  sails.  At  LinuxWorld  in  February  2003, 
IBM  senior  executive  Steve  Mills  revealed  his  company’s 
plans  to  use  AIX,  IBM's  own  Unix  platform,  to  accelerate  Linux 
development.  "It  sounded  like  they  would  take  all  of  AIX  and 
put  it  on  Linux,  basically  obliterating  Unix,"  says  Sontag. 

SCO  was  alarmed.  Even  so,  the  company  continued  to  dig 
into  the  Linux  kernel’s  source  code,  as  it  was  still  thinking 
about  ways  to  allow  Unix  and  Linux  to  run  together.  In  Febru¬ 
ary  2003,  SCO  allegedly  found  Unix  System  V  code  and  Unix 
derivative  code  in  Linux  kernel  version  2.4. 

The  implications— to  SCO— were  clear.  If  Linux  contained 
SCO’s  proprietary  code,  then  Linux  (which  under  the  General 
Public  License  mandated  free  distribution  of  the  code)  was 
violating  SCO’s  Unix  license.  Therefore,  SCO  could  now  chal¬ 
lenge  the  legality  of  the  Linux  license,  thus  radically  affecting 
not  only  how  Linux  was  developed  and  sold,  but  also  its  via¬ 
bility  as  a  corporate  platform.  Indeed,  everyone  using  Linux 
with  Unix  stuck  into  it  would,  in  theory,  owe  SCO  a  fee.  If  SCO 
could  prove  its  case,  it  was  sitting  on  a  gold  mine. 

So  SCO  left  the  Linux  business  and  entered  the  litigation 
business. 


The  History 
of  SCO 


The  History 
of  the  Code 


1979:  The  Santa  Cruz 
Operation  (SCO)  founded 
as  a  Unix  company 


< 

>  < 
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1969:  Unix 

1989:  Bell  Labs’  parent 

1991:  AT&T  spins 

1992:  Novell 

invented  at  Bell 

company,  AT&T,  releases 

off  Unix  Systems 

acquires  USL 

Labs 

Unix  System  V 

Laboratories  (USL) 
but  retains  majority 
ownership 

from  AT&T 

1992:  SCO  launches 
OpenServer  Unix 
operating  system 


1993:  SCO 

goes  public 


1994:  Caldera 
founded  by  ex- 
Novell  chief  Ray 
Noorda  as  a  Linux 
distributor 
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SCO  is  Suing... 

IBM 

Claims:  Copyright  infringement, 
breach  of  contract,  unfair  competi¬ 
tion,  tortious  interference 

Filed:  March  6, 2003 
Details:  This  is  SCO’s  anchor  case,  and 
its  outcome  determines  everything— the 
future  of  SCO  and  the  validity  of  the  licens¬ 
ing  terms  under  which  Linux  is  distributed. 
SCO  is  now  seeking  $5  billion  in  damages. 

To  prevail,  SCO  must  convince  a  jury 
that  IBM  knowingly  mixed  a  derivative  of 
SCO’s  code  into  its  Linux  products.  That 
would  mean  that  SCO’s  property  is  being 
given  away  illegally  under  Linux’s  General 
Public  License,  which  mandates  free  dis¬ 
tribution  of  source  code  when  it’s  used  in 
commercial  products. 

(The  IBM  case  focuses  mostly  on  alle¬ 
gations  that  the  company  improperly  uses 
a  Unix  System  V  derivative,  in  this  case 
AIX.  Other  allegations  include  the  literal 
copying  of  Unix  code  into  the  Linux  kernel, 
and  “nonliteral  transfers”  in  which  Linux 
developers  have  used  Unix  System  V 
methods,  structures  and  sequences  with¬ 
out  permission  or  license. 

Status:  Both  sides  exchanged  discovery. 
Case  is  scheduled  to  open  Nov.  1, 2005. 


AUTOZONE 

Claim:  Copyright  infringement 

Filed:  March  3, 2004 
Details:  SCO,  after  sending  several  for¬ 
mal  warnings,  sued  AutoZone,  a  national 
chain  of  auto  parts  stores,  for  using  Linux 
and  failing  to  pay  SCO. 

(Before  the  suit  was  filed,  a  general 
legal  defense  fund  had  been  created 
by  IBM  and  Linux  vendors  to  fight 
SCO’s  suits.) 

Status:  AutoZone  has  requested  a  stay 
and  also  asked  for  the  trial  to  move 
from  Las  Vegas  to  Memphis,  AutoZone’s 
headquarters.  At  press  time,  SCO  was 
preparing  a  response. 
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NOVELL 
Claim:  Slander  of  title 

Filed:  Jan.  20, 2004 
Details:  When  SCO  went  public  with  its 
claims,  Novell  responded  by  claiming 
ownership  of  some  Unix  copyrights, 
which  Novell  said  could  make  SCO's 
claims  invalid.  SCO  in  turn  claimed  that 
it  took  ownership  of  those  copyrights 
when  it  bought  the  Unix  System  V  source 
code  in  1995.  (See  "How  SCO  Came  to 
Own  Unix  Source  Code,”  below.) 

SCO’s  suit  here  is  akin  to  a  charge  of 
trespassing.  Novell,  SCO  says,  is  trying 
to  claim  ownership  of  something  SCO 
already  owns.  SCO  is  also  accusing 
Novell  of  trying  to  stall  the  case  and  con¬ 
fuse  the  marketplace. 

Status:  Novell  filed  a  motion  to  dismiss, 
which  has  been  denied.  SCO  filed  a 
motion  to  move  from  federal  to  state 
court,  which  was  also  denied.  The  court 
has  asked  SCO  to  specify  the  damages 
that  have  resulted  from  Novell's  actions. 


DAIMLERCHRYSLER 

Claim:  Breach  of  contract 

Filed:  March  3, 2004 
Details:  In  this  case  SCO  claims  contrac¬ 
tual  violations,  not  copyright  violations, 
because  DaimlerChrysler  is  a  Unix 
licensee  and  AutoZone  isn’t.  SCO  claims 
it  gave  DaimlerChrysler  30  days  to  cer¬ 
tify  that  it  was  in  compliance  with  SCO’s 
licensing  terms.  SCO  says  the  automaker 
still  hasn’t  certified  compliance,  thus 
breaching  the  contract. 

Status:  DaimlerChrysler  filed  a  motion 
to  dismiss.  At  press  time,  SCO  was 
preparing  a  response. 


and  disparagement,  among  others 


Filed:  Aug.  4, 2003 

Details:  Red  Hat,  an  IBM  partner  on  Linux,  hit  SCO  with  seven 
claims.  Red  Hat  says  that  SCO's  public  legal  campaign  is  based  on 
false  and  misleading  claims,  the  only  purpose  of  which  is  to  make 
customers  wary  of  investing  in  Linux  and  thus  Red  Hat. 

Status:  SCO  filed  for  dismissal.  Judge  stayed  the  case  until  the  IBM 
case  is  resolved.  Red  Hat  filed  a  motion  to  reconsider.  No  ruling  yet. 


Counter  claims:  Breach  of  contract,  unfair  competition, 
unfair  and  deceptive  trade  practices,  breach  of  the  GNU 
General  Public  License  (GpL)  and  patent  infringement, 
among  others 


Filed:  Aug.  6, 2003 

Details:  Big  Blue  answered  SCO's  lawsuit  with  10  counterclaims. 
IBM  is  charging  that  SCO  is  maliciously  attacking  major  IBM 
products,  Linux  and  Unix,  which  is  having  a  damaging  effect  on 
IBM’s  business.  IBM  also  says  that  SCO  didn’t  provide  sufficient 
warning  before  revoking  IBM's  “perpetual  and  irrevocable" 
license  to  the  Unix  System  V  code. 

In  addition,  IBM  claims  that  SCO  itself  used  and  sold  Linux 
products  under  the  GPL.  In  other  words,  IBM  is  saying  that  SCO 
violated  the  very  agreement  it's  now  accusing  others  of  violating. 

IBM  also  identified  four  of  its  own  patents  that  it  claims  SCO 
has  violated,  in  effect,  IBM  is  saying,  “You  want  a  fight?  You  got  it.” 
Status:  Will  be  heard  with  original  SCO  v.  IBM  case  starting  in 
November  2005. 


SCO  Might  Sue 

SGI 


Details:  SCO  accused  Silicon  Graphics  Inc.  (SGI)  of  contributing 
Unix  System  V  source  code  to  Linux.  In  an  open  letter  to  the  Linux 
community,  SGI  acknowledged  some  “trivial"  duplications  of 
source  code  and  then  offered  patches  to  replace  those  duplica¬ 
tions  with  fresh  code. 

SCO  had  also  charged  SGI  with  violating  its  Unix  license  with 
another  piece  of  software,  XFS.  SGI  denies  this. 

Status:  SCO  officials  publicly  state  that  suing  SGI  remains  an 
option  and  the  two  companies  have  been  “in  discussions.” 


2001:  Caldera  acquires  SCO’s 


2000:  Caldera 
goes  public 

Unix  server  and  services 
groups;  the  rest  of  SCO 
becomes  a  separate,  unrelated 
company  called  Tarantella 

2002:  Dari  McBride  named 
CEO;  Caldera  changes  name  to 
The  SCO  Group  Inc. 

2003:  SCO  sues  IBM 
for  infringement  of 
copyright  and  IBM 
countersues 

2004:  SCO  sues 
everybody  over 
Linux  ownership 

• 

1995:  SCO  buys  Unix  System 

V  source  code  from  Novell 
along  with  Novell’s  UnixWare 

>  1 

2001:  Caldera  acquires 

Unix  source  code  and  Unix 
products  from  SCO 

>  { 

2002:  The  newly  renamed  SCO 
maintains  ownership  of  the  Unix 
System  V  source  code 

►  ( 

Group 

► 

software  platform 
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SCO  President  and  CEO  Dari  McBride  —The  central  figure 
in  the  maelstrom,  McBride  tries  to  focus  on  SCO’s  business  and 
products.  "In  spite  of  the  popular  media  saying  we're  the 
most  hated  company  in  technology,  customers  are 
fairly  pleased  with  the  direction  of  the  company,"  he  B 

told  CIO,  several  months  befor  e  posing  for  the 
cover  of  Fortune  wrapped  in  a  printout  of  the  ' 

Unix  development  history  time  line. 


Attorney  David  Marriot  —IBM  hired  the  law  firm  that  its  current 
foe,  David  Boies,  spent  most  of  his  career  with,  Cravath,  Swaine  & 
Moore.  Marriot  and  IBM’s  other  lawyers  have  been  far 
less  vocal  about  the  case  than  SCO,  putting  out 
terse,  narrow  statements,  if  any  at  all. 


Red  Hat  President  and  CEO 
Matthew  Szulik  —Matches  the 


aggres-  if 
sive  and  apocalyptic  tone  of  SCO’s  Chris 
Sontag.  “This  is  a  march  for  freedom,” 
he  told  Forbes.  “This  is  about  a  minority  who 
are  trying  to  hold  the  open-source  develop¬ 
ment  community  hostage.  We  had  to  step 
forward  and  say,  enough  is  enough.” 


SCO  Senior  VP  and  General  Man 


Chris  Sontag-Bad  cop  to  McBride’s 
®  ~  good  cop.  Sontag  is  focused  on 
extracting  license  fees  from  users  that  SCO 
claims  are  in  violation  of  its  license,  and  he 
casts  the  lawsuits  in  dramatic  terms^'We  are 
not  putting  a  lot  of  energy  into  settling.  The  b; 
tie  lines  are  drawn.  It’s  a  death  match.  We  eitf 
win  or  die." 


and  the  Linux  community  — Torvalds 

has  attacked  SCO  as  “a  company  that 
seems  to  have  squandered  all  of  its 
money.. .and  now  seems  to  play  the  U.S.  legal  system 
like  a  lottery.”  Torvalds  is  usually  a  reluctant  leader  of 
what  some  call  a  movement  toward  open-source  software;  but, 
in  this  instance,  he  matched  the  fiery  disposition  of  the  rabid  network  of 
open-source  developers  that  make  up  the  Linux  community,  well-known 
for  its  ability  to  mobilize  against  those  who  are  critical  of  Linux  and 
open  source.  The  community  considers  open-source  software  techni¬ 
cally  and  morally  superiorto  proprietary  code. 


\  Attorney  David  Boie: 

lion  in  cash  and  400, OC 
ically,  Boies  once  defen 
he  was  the  Justice  Dep< 
antitrust  case.  Now,  hissucce 
IBM  may  contribute  to  the  su 
(Microsoft)  and  wound  the  co 


WHAT 
EVERYONE 
IS  FIGHTING 
ABOUT 


Unix  System  V  Source  Code— 

A  bunch  of  decades-old  zeroes  and  ones, 

Unix  System  V  source  code  is  the  derivative  of  the 
original  Unix  work  done  in  the  late  '60s  at  Bell  Labs, 
A  skein  of  derivative  works  makes  up  the  Unix 
family  tree,  which,  when  printed  out,  is  about 
\  9  feet  long.  SCO  claims  it  owns  thousands  of  / 
\  lines  of  this  code,  which  has  found  its  way  / 
\  into  Linux,  sometimes  literally  / 

N.  copied  and  pasted. 


IN  THE  SCO 


IN  THE  IBM  CORNER 


Conspiracy  Theories 

Some  people  see  larger  forces  at  work  behind  the  blizzard  of  SCO-related  lawsuits 


Microsoft  is  behind  SCO. 

When  SCO  began  claiming  ownership  of  the 
Unix  System  V  source  code,  Linux  advocates 
started  whispering  that  the  owner  of  Windows, 
Microsoft,  wanted  the  Linux  market  to  stall,  and 
was,  in  effect,  financing  SCO. 

SCO  officials  have  acknowledged  that  Micro¬ 
soft  is  a  “significant  customer,”  accounting  for 
25  percent  of  SCO's  $79  million  in  revenue  (and 
$5.4  million  in  income)  in  2003. 

BayStar  Capital,  a  private  investment  firm, 
also  invested  $20  million  in  SCO  (in  a  preferred 
stock  purchase)  in  late  2003,  and  then  recruited 
Royal  Bank  of  Canada  to  invest  another  $30  mil¬ 
lion.  Shortly  thereafter,  a  memo  from  a  consult¬ 
ant  to  SCO  executives  became  public,  claiming 
that  BayStar  invested  in  SCO  on  the  recommen¬ 
dation  of  Microsoft,  and  that  Microsoft  would 
like  to  use  “BayStar-like  entities  to  help  [SCO] 
get  significantly  more  money." 


SCO  spokesman  Blake  Stowell  responded 
in  a  statement:  “We  believe  the  e-mail  was 
simply  a  misunderstanding  of  the  facts  by  an 
outside  consultant.  Contrary  to  the  specula¬ 
tion,  Microsoft  did  not  orchestrate  or  partici¬ 
pate  in  the  BayStar  transaction.”  Microsoft 
similarly  denies  orchestrating  the  deal. 

BayStar  considered  pulling  its  investment 
in  March  2004.  After  negotiations,  SCO  gave 
BayStar  $13  million  in  cash  and  let  it  convert 
its  preferred  shares  to  common  stock,  which 
Royal  Bank  of  Canada  had  already  done. 

No,  Sun  Microsystems  is  behind  SCO. 

After  Microsoft,  SCO's  next  largest  customer  is 
Sun,  which  accounted  for  15  percent  of  SCO 
revenue  in  2003.  (SCO  notes  in  public  docu¬ 
ments  that  no  other  vendor  besides  Sun  and 
Microsoft  accounted  for  more  than  10  percent 
of  its  total  revenue.)  But  why  would  Microsoft’s 


archrival  help  SCO? 

The  answer  is  Solaris,  Sun's  Unix  operating 
system,  which  has  suffered  severely— arguably 
more  so  than  Windows— due  to  the  rise  of 
Linux  as  an  alternative.  Linux  is  the  enemy  of 
Solaris.  SCO  is  the  enemy  of  Linux.  The  enemy 
of  my  enemy,  the  saying  goes,  is  my  friend. 

And  IBM  is  behind  Red  Hat. 

SCO  Senior  VP  Chris  Sontag  suggested  in  an 
interview  with  CIO  lastyearthat  IBM  uses  Red 
Hat  to  distribute  Linux  in  order  to  shield  Big 
Blue  from  liability  issues.  In  fact,  IBM’s  Linux 
guru  Karl-Heinz  Strassemeyer  was  quoted  in 
The  Register  saying,  “We  don't  want  to  take 
the  risk  of  being  sued  for  a  patent  infringe¬ 
ment.  That's  why  we  have  distributors." 

"In  the  meantime,  they  benefit  on  hard¬ 
ware  and  services  sales,"  Sontag  said,  calling 
it  “a  great  scam.” 
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Software  Liability 


In  the  Know  About  SCO 

Some  useful  points  to  help  you  navigate  the  legal  morass 


Q.  Why  would  SCO  sue  its  own 
customers? 

A.  This  is  similar  to  the  record 
industry  suing  people  for  down¬ 
loading  music  for  free.  SCO 
claims  that  people  are  using 
SCO  code  without  paying  for  it. 

Q.  That  sounds  clear.  It’s  their 
intellectual  property,  so  they 
ought  to  be  paid  for  it,  right? 

A.  It's  not  that  simple.  First, 
while  it’s  clear  when  someone 
steals  a  song,  because  you  can 
hear  it  played,  it's  not  as  clear 
when  code  has  been  stolen, 
because  it's  hidden  within  mil¬ 
lions  more  lines  of  code.  Also, 
with  open-source  projects, 


where  code  could  come  from 
any  developer,  it’s  sometimes 
hard  to  tell  its  origin. 

Q.  Isn’t  it  the  responsibility 
of  the  people  who  make  the 
product  to  have  some  sort  of 
accountability  system  so  that  if 
someone  does  cheat  by  plagia¬ 
rizing  code,  that  person  or 
group  can  be  identified? 

A.  Probably.  That’s  why  Linus 
Torvalds  recently  sponsored  a 
measure  that  would  require 
anyone  who  works  on  Linux  to 
sign  a  Developers  Certificate  of 
Origin  in  orderto  document 
who  contributed  whatto  Linux. 
This  is  notan  admission  of  guilt 


on  the  part  of  Torvalds  or  Linux 
developers,  but  a  recognition 
of  the  need  for  accountability. 

Q.  Wouldn’t  it  behoove  a  small 
company  like  SCO  to  settle 
and  not  sink  millions  into  a 
years-long  battle? 

A.  Legal  experts  say  the  goal 
should  always  be  to  settle.  That 
seems  highly  unlikely  underthe 
present  circumstances.  Both 
sides  are  using  the  language 
and  tactics  of  a  moral  or  holy 
war.  SCO  is  claimingthe  Gen¬ 
eral  Public  License  is  unconsti¬ 
tutional.  Red  Hat  is  claiming 
SCO  is  holding  Linux  hostage. 
Lawyers  are  supposed  to  try  to 


Love  Letters, 
and  Hacks 

The  SCO  lawsuits  have  stirred  powerful  emotions  among  all 
the  major  players  and  outsiders  as  well 

Epistolary  Exchanges  SCO  has  sent  a  series  of  what  it  called  "Love  Letters"  to  various  con¬ 
stituencies  (licensees,  Fortune  1000  companies,  Congress,  among  others)  explaining  its  case.  In 
one  such  letter,  SCO  President  and  CEO  Dari  McBride  wrote  to  the  Linux  community:  "A  sustain¬ 
able  business  model  for  software  development  can  be  built  only  on  an  intellectual  property  foun¬ 
dation.”  Open-source  community  members  replied,  “Your  offer  to  negotiate  with  us  comes  at  the 
end  of  a  farrago  of  falsehoods,  half-truths,  evasions,  slanders  and  misrepresentations.  [Linux]  is 
not  yours,  has  never  been  yours  and  will  never  be  yours." 

Hate  Mail  SCO  receives  a  steady  stream  of  hate  e-mail  from  fringe  elements  of  the  Linux  com¬ 
munity.  One  printable  missive  said:  "I  bet  you  didn’t  even  consider  the  resolve  of  thousands  of 
programmers  and  geeks  when  you  decided  to  hijack  Linux.  Well,  you  picked  the  wrong  fight 
because  nerds  and  geeks  THRIVE  on  showing  someone  that  they  are  wrong." 

Hacks  Hackers  have  continually  attacked  SCO’s  website,  most  successfully  in  late  January 
when  a  virus  called  MyDoom  specifically  targeted  SCO’s  network.  MyDoom  used  thousands  of 
zombie  computers  to  knock  SCO  offline  and  slow  Internet  traffic  in  general.  SCO  was  forced  to 
temporarily  change  its  home  URL. 


settle;  no  one  here  seems  to 
want  settlement. 

Q.  Should  I  hold  off  investing  in 
open  source  and  Linux? 

A.  On  the  one  hand,  if  SCO 
wins  its  cases,  it  would  likely  be 
entitled  to  licensing  fees  and 
other  reparations.  SCO  winning 
would  also  affect  Linux  develop¬ 
ment  and  open-source  licensing 
in  unknown  ways.  On  the  other 
hand,  Linux  vendors  have 
offered  indemnity  to  users,  the 
case  will  likely  last  years  (it 
doesn’t  start  until  late  2005), 
and  an  SCO  victory  is  not  at  all 
certain.  Only  you  can  measure 
the  risk  you’re  willing  to  take. 


At  press  time,  we  learned... 

- •  In  April  2004,  SCO  laid  off  nearly  10 

percent  of  its  275-person  workforce. 

- •  SCO  revenue  in  the  second  quarter 

of  '04  took  a  53  percent  nosedive; 
licensing  revenue  dropped  99  percent 
from  $8.25  million  the  same  quarter 
a  year  ago  to  $11,000  this  year  (SCO 
says  this  is  a  reflection  of  the  fact  that 
licensing  revenue  is  not  predictable 
and  will  go  up  and  down);  SCO’s 
quarterly  net  loss  was  $9.4  million. 

- •  SCO  in  June  announced  five  new 

UnixWare,  OpenServer  and  other 
Unix-based  products.  They  don’t  run 
on  Linux. 


More  on  Open  Source 


WHERE’S  THE  OPEN-SOURCE  REVOLUTION 
TODAY?  Check  out  our  online  resources 
that  present  the  only  real-time  way  to  keep 
up  with  the  SCO-Linux  debate.  Find  the 
links  in  the  online  version  of  this  article  or 
at  www.cio.com/printlinks. 
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I  really  believe  that  we  don’t  have  to  make 
a  trade-off  between  security  and  privacy,” 
says  retired  Adm.  John  Poindexter.  “I  think 
technology  gives  us  the  ability  to  have  both 


PHOTOGRAPHY  BY  DRAKE  SOREY 


The  man  behind  the  government’s  canceled 
antiterrorism  Total  Information  Awareness 
program  explains  for  the  first  time  what  went 
wrong  and  how,  in  fact,  it  may  not  really  have 
been  canceled  after  all  by  scott  berinato 


Adm.  John  M.  Poindexter  still  slips  into 
it  tense  when  he  talks  about  Total  Infor¬ 
mation  Awareness  (TIA). 

He  does  this  despite  the  fact  that  he  resigned 
from  the  Defense  Advanced  Research  Projects 
Agency  (DARPA)  a  year  ago  amid  controversy, 
despite  the  fact  that  DARPA  subsequently  dis¬ 
solved  the  Information  Awareness  Office  (IAO) 
he  had  built,  and  despite  the  fact  that  DARPA 
ostensibly  canceled  TIA,  the  wide-ranging  pro¬ 
gram  to  use  technology  for  gathering  intelligence 
to  combat  terrorism.  Poindexter,  however,  still 
believes  in  TIA.  In  fact,  he  maintains  that  TIA 
hasn’t  really  gone  away;  it’s  just  gone  undercover. 
And  he  says  that  means  that  America  may  end 
up  with  less  effective  (but  even  more  invasive) 
antiterrorism  technologies. 


When  Poindexter  spoke  about  TIA  at  the 
CSO/CIO  Perspectives  conferences  in  April,  in 
Carlsbad,  Calif.,  it  was  his  most  detailed  public 
discussion  of  the  program  since  leaving  DARPA. 

He  used  the  opportunity  not  only  to  promote 
the  concepts  behind  TIA,  but  also  to  respond  to 
criticism  from  Congress,  the  media  and  perse¬ 
vering  privacy  advocates. 

“The  9/11  Commission  is  identifying  the 
exact  problems  that  we  were  trying  to  get  tech¬ 
nology  to  solve.  So  I  keep  pushing  the  idea,” 
Poindexter  says. 

And  as  he  pushes,  programs  such  as  TLA  nego¬ 
tiate  the  roiling  waters  of  public  debate.  Can  the 
United  States  strike  a  balance  between  the  gov¬ 
ernment’s  need  to  know  and  individual  privacy? 
To  what  extent  can  and  should  citizens  be 
informed  about  the  intelligence  activities  and 
tools  that  penetrate  their  lives? 

These  are  some  of  the  questions  we  were  eager 
to  put  to  Poindexter. 
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Security  and  Privacy 


TIA:  The  Origins,  the  Mission 

The  spark  for  TIA  was  John  Hinckley  Jr.’s  1981 
assassination  attempt  on  President  Ronald  Reagan. 
Poindexter,  then  a  White  House  military  assistant 
(he  became  national  security  adviser  in  1985),  says 
that  got  him  and  others  thinking  about  “crisis  pre¬ 
planning.”  Poindexter  set  up  a  crisis  preplanning 
group  at  the  White  House,  and  its  deliberations  soon 
shifted  to  the  larger  issue  of  terrorism.  The  group 
considered  the  possibility  that  ambitious  data  analy¬ 
sis  might  reveal  the  outlines  of  future  events.  But  after 
the  Iran-Contra  affair  and  Poindexter’s  role  in  the 
scandal  came  to  light  in  the  mid-’80s  (he  was  con- 


intelligence  community’s  profile  of  suspicious  behavior. 

Within  a  year  of  Genoa’s  launch,  it  had  become  clear  to 
Poindexter  that  the  technology’s  most  important  work  would 
be  to  help  preempt  asymmetric  threats:  the  use  of  unconven¬ 
tional  weapons  and  tactics  against  overwhelmingly  superior 
military  force — what  Poindexter  calls  “the  new  terrorism.” 
The  term  Total  Information  Awareness  was  first  presented 
publicly  in  early  1999.  From  1997  through  2002  Genoa, 
including  the  project  that  would  become  TIA,  received 
$42  million  in  funding. 

Then  came  9/1 1 .  Some  Project  Genoa  managers  felt  the 
technology  they  were  working  on  could  have  prevented  the 
tragedy.  Poindexter  is  more  circumspect.  “Now,  I  don’t  think 


he  9/11  Commission  is  identifying 
the  exact  problems  that  we  were  trying 
to  get  technology  to  solv^i  3  ™ 


victed  in  1990  on  five  felony  counts,  including  lying  to  Con¬ 
gress;  the  conviction  was  subsequently  overturned),  crisis 
preplanning  strategy  languished. 

In  1996,  however,  DARPA  issued  a  Broad  Agency 
Announcement  or  BAA.  The  BAA  stated  that  DARPA 
wanted  to  develop  information  technologies  that  would  help 
“identify  potential  future  crises  and  our  options  for 
preemption  and  prevention.” 

Eventually,  the  BAA  led  to  Project  Genoa.  Launched  in 
1997,  this  effort  (which  later  morphed  into  TIA)  was 
intended  to  collect  many  projects  under  one  umbrella.  The 
data  mining  application  that  most  people  associate  with  TIA 
was  simply  one  of  the  featured  projects. 

In  large  part,  the  I  in  TIA  refers  to  information  about  trans¬ 
actions.  Terrorist  operations  require  preparation.  Prepara¬ 
tion  can  be  viewed  as  a  collection  of  transactions — even 
everyday,  innocuous  ones  such  as  buying  an  airplane  ticket 
or  registering  for  flight  school.  It  also  can  include  more  suspi¬ 
cious  ones,  such  as  the  purchase  of  large  amounts  of  fertilizer 
or  a  crop  duster. 

The  problem,  of  course,  is  that  the  few  evil  transactions  are 
embedded  within  the  many  innocent  ones.  “It  would  be  ideal 
if  we  could  have  an  uncontrolled  flow  of  information,”  says 
Poindexter,  meaning  ideal  from  an  intelligence  community  per¬ 
spective.  “But  we  realized  you  can’t  do  that.”  So  it  was  under¬ 
stood  within  Project  Genoa  that  technology  would  need  to  be 
developed  that  would  look  for  patterns  of  activity  that  fit  the 
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I  would  say  that  officially.  But  certainly  I  felt  a  great  frustra¬ 
tion  that  we  had  not  been  able  to  avoid  9/11,”  he  says.  After 
the  tragedy,  he  suggested  that  DARPA  establish  an  informa¬ 
tion  awareness  office  and  invest  a  significantly  greater 
amount  of  money  in  the  effort. 

The  Debate  over  TIA 

Poindexter  joined  DARPA  to  head  the  Information  Aware¬ 
ness  Office  in  January  2002.  Anticipating  controversy  sur¬ 
rounding  him  and  the  program,  he  says  he  felt  it  was 
important  to  move  quickly.  So  he  suggested  something  radi¬ 
cal  for  DARPA:  Develop  the  technology  and  the  policy  to  gov¬ 
ern  its  use  in  parallel,  thus  avoiding  the  possibility  that  policy 
concerns  could  be  used  to  kill  the  project. 

Poindexter  saw  privacy  as  the  mother  of  all  objections.  “I 
knew  from  the  beginning  that  privacy  was  going  to  be  a  huge 
issue,  especially  with  regard  to  applying  Total  Information 
Awareness  in  counterterrorism,”  he  says.  “Because  if  the 
technology  development  was  successful,  the  logical  place  to 
apply  it  was  inside  the  United  States.” 

So,  according  to  Poindexter,  part  of  the  early  policy 
development  was  to  initiate  a  “reasoned,  open  public  dis¬ 
cussion  of  the  privacy  issues.”  But  in  Poindexter’s  opinion, 
that  never  happened.  Instead,  TIA  was  pilloried  as  an 
Orwellian  nightmare. 

“A  lot  of  our  critics  feel  that  the  way  that  you  preclude 
some  future  policy  that  you  don’t  particularly  like  is  that  you 


prevent  the  technology  from  being  developed,”  he  says. 
“And  I  think  that’s  a  very  serious  problem — the  idea  that  if 
you  limit  technology  development,  then  that’s  the  policy.” 

In  addition  to  the  media  painting  the  project  with  broad 
strokes,  Poindexter  charges  that  some  of  the  reporting  was  j  ust 
wrong.  He  says,  for  example,  that  he  never  intended  to  build 
a  single,  central  database  to  collect  data  on  every  transaction 
by  every  American.  Architecturally,  he  thinks  it’s  a  poor  idea. 
Ditto  the  idea  of  warehousing  all  of  this  transaction  data. 

Although  Poindexter  grew  accustomed  to  being  cast  as  an 
evil  genius  hell-bent  on  invading  citizens’  privacy,  he  feels  it’s 
a  bad  rap.  “Uncontrolled  access  to  data,  with  no  audit  trail  of 
activity  and  no  oversight,  would  be  going  too  far,”  he  says. 
“This  applies  to  both  commercial  and  government  use  of 
data  about  people.” 

As  to  potential  abuse  of  such  a  system,  Poindexter  allows 
that  while  it’s  a  “legitimate  concern,”  it’s  not  a  technology 
issue.  “It’s  a  policy  issue,”  he  says. 


The  End  of  Tl  A 

But  it  wasn’t  policy  that  killed  TIA;  it  was  the  “FutureMAP” 
project. 

FutureMAP  was  an  experiment  to 
gauge  whether  an  exchange  where  ter¬ 
rorism  experts  could  bet  on  potential 
future  national  security  events  might  have 
value  in  predicting  their  likelihood. 

The  idea  is  that  if  you  give  a  group  of 
people  an  economic  incentive  to  make 
accurate  predictions,  their  collective  wis¬ 
dom,  reflected  by  their  aggregated  choices 
and  driven  by  the  profit  motive  (either  in 
the  elevation  of  their  reputations  or  in  the 
form  of  a  monetary  award  for  being 
right),  will  be  superior  to  any  individual’s. 

Such  exchanges  have  proven  to  be  some¬ 
what  effective  in  other  areas,  such  as  pre¬ 
dicting  telecom  policy. 

One  of  the  contractors  working  on  a 
part  of  FutureMAP  posted  on  its  website 
a  number  of  possible  events,  including  the 
assassination  of  Yasser  Arafat,  the  over¬ 
throw  of  the  King  of  Jordan  and  a  missile 
attack  by  North  Korea.  Critics  immedi¬ 
ately  pounced,  calling  FutureMAP  an 
online  casino  where  people  gamble  on 
(and  profit  from)  death  and  disaster. 

“I  think  the  concept  [of  a  futures  mar¬ 
ket]  is  clearly  sound,”  says  Poindexter. 

Give  smart  people  with  information  an 


incentive  to  be  right,  and  they  will  be  more  right  than  if  they 
have  no  incentive.  And  if  it  proved  successful,  it  probably 
would  have  been  implemented  in  a  couple  of  ways.  “One 
would  be  open  markets  on  some  questions  and  closed  mar¬ 
kets,  maybe  within  the  intelligence  community,  on  the  more 
sensitive  kinds  of  questions.  The  problem  we  were  struggling 
with  within  the  closed  market  was  what  the  incentive  would 
be.  You  probably  don’t  use  dollars.  You  probably  have  some 
other  incentives.  But  those  are  all  questions  that  needed  to  be 
explored,”  he  says. 

But  they  wouldn’t  be.  After  FutureMAP  was  outed  in  the 
summer  of  2003,  and  the  assassination  futures  cited  (“We 
never  would  have  approved  those  questions  being  put  out  to 
the  public,”  Poindexter  says),  the  reaction  was  furious.  Sens. 
Ron  Wyden  (D-Ore.)  and  Byron  Dorgan  (D-N.D.)  wrote  to 
Poindexter:  “Spending  taxpayer  dollars  to  create  terrorism 
betting  parlors  is  as  wasteful  as  it  is  repugnant.  The  American 
people  want  the  federal  government  to  use  its  resources 
enhancing  our  security,  not  gambling  on  it.” 

Poindexter  resigned  two  weeks  later.  He  denies  that  the  furor 
caused  his  resignation.  He  insists  that  he  had  been  planning 
to  leave  anyway. 


The  Value  of  Starting  Small 


Before  Congress  pulled  the  plug  on  its  funding,  the  Total 
Information  Awareness  project  taught  its  IT  staff  the  value 
of  doing  projects  on  a  small,  iterative  scale 


re  the  Total  Information  Awareness  (TIA)  project  was  dissolved,  it  had  made 
progress  on  several  fronts.  It  created  “Vanilla  World,”  a  simulation  not  unlike  the  popu¬ 
lar  Electronic  Arts  Sims  computer  game.  Vanilla  World  had  two  million  "people,” 
including  terrorists,  making  transactions.  The  goal  of  the  simulation  was  to  see  whether 
patterns  of  suspicious  transactions  would  rise  up  above  the  noise  of  normal  activity. 
Other  projects  were  developed  and  readied  for  testing  in  an  operational  setting. 

“TIA  was  being  used  by  real  users,  working  on  real  data— foreign  data,”  retired 
Adm.  John  Poindexter  says.  “Data  where  privacy  is  not  an  issue.  And  those  using  it 
were  working  on  real  problems.  And  the  experiment's  metrics  were  being  measured  so 
we  could  figure  out  whether  the  technology  was  really  helping  or  not.  We  also  got 
feedback  from  users  on  what  needed  to  be  modified.” 

In  other  words,  TIA  was  a  typical  IT  project.  But  Poindexter  believes  it  was  designed 
better  than  most  big  IT  projects,  because  it  focused  on  iterative  development  of 
the  systems. 

“That's  the  way  you  develop  these  big  systems,”  he  says.  "You  do  it  on  a  small  scale. 
And  you  accept  failure  as  a  possible  outcome  of  some  of  the  experiments.  If  you  don't 
get  failures,  you’re  not  pushing  hard  enough  on  the  objectives.”  -S.B. 
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After  the  Fall 

“I  think  if  I  had  to  do  it  over  again,  ”  Poindexter  says,  “  I’d  do  it 
the  same  way.  I  would  just  put  more  resources  into  getting  the 
public  diplomacy  part  stronger.  D  ARPA  has  a  $3  billion  budget, 
and  there’s  a  single  public  affairs  person  and  a  single  legislative 
affairs  person.  There’s  no  full-time  [legal]  counsel.  I  think  it’s  a 
significant  problem  if  D  ARPA  is  going  to  continue  to  take  on 
controversial  issues.  A  full  public  affairs  staff,  a  legislative  affairs 
staff,  a  legal  staff  has  got  to  be  on  hand.” 

Poindexter  remembers  one  area  where  a  bigger  support 
staff  could  have  helped:  his  own  TIA  presentation.  There 
was,  for  example,  a  diagram  of  a  TIA  project  with  a  little  box 
in  the  middle:  “a  filter,”  Poindexter  recalls.  “And  the  purpose 
of  that  filter  was  very  complicated,  but  essentially  it  was  to 
provide  privacy  protection.  But  we  didn’t  make  it  very  big, 
and  it  wasn’t  really  clear  what  it  was  for.” 

Without  the  filter,  the  project,  Poindexter  acknowledges, 
“was  a  scary  thing.  So  one  of  the  things  that  we  should  have 


or  “black” — parts  of  the  defense  budget,  where  it’s  free  from 
public  scrutiny. 

Ironically,  he  argues,  the  dissolution  of  TLA  was,  in  effect,  a 
defeat  for  privacy  advocates  because  the  projects  they  opposed 
have  now  gone  underground,  choking  off  public  debate. 

“I  quote  language  from  the  defense  appropriations  bill, 
which  is  unclassified.  What  it  says  is  that  we’re  going  to  close 
down  the  Information  Awareness  Office.  But,  oh,  by  the  way, 
some  of  the  parts  are  not  controversial,  and  we’re  going  to 
move  them  into  the  classified  annex  of  the  budget.  And  where 
they  move  them  is  classified.  Exactly  what  they  do  is  classi¬ 
fied,”  Poindexter  says. 

[Ed  note:  The  language  Poindexter  is  referring  to  is  this: 
“Notwithstanding  any  other  provision  of  law,  none  of  the 
funds  appropriated  or  otherwise  made  available  in  this  or 
any  other  Act  may  be  obligated  for  the  Terrorism  Information 
Awareness  Program:  Provided,  that  this  limitation  shall  not 
apply  to  the  program  hereby  authorized  for  processing, 


knew  from  the  beginning  that  privacy 
was  going  to  be  a  huge  issue.  If  the 
technology  development  was 
successful,  the  laical  place  to  apply  it 
was  inside  the  United  StatesC  -  E„ 


done — I  should  have  done — was  to  be  much  more  sensitive 
to  the  privacy  issue.  I  should  have  tried  to  be  more  precise  in 
talking  about  it.  Explain  it  in  bigger  detail,  and  put  it  up  in 
flashing  lights. 

“I  really  believe  that  we  don’t  have  to  make  a  trade-off 
between  security  and  privacy,”  says  Poindexter.  “I  think  tech¬ 
nology  gives  us  the  ability  to  have  both.  The  reasoned,  open 
public  discussion  that  I  wanted  to  achieve  is  finally  beginning 
to  take  place.  But  unfortunately,  in  my  opinion,  Congress 
overreacted,  for  political  reasons.” 

Gone  but  Not  Forgotten 
(and  Maybe  Not  Even  Gone) 

Poindexter  speaks  of  TIA  in  the  present  tense  because  some  of 
its  projects  (according  to  him  and  other  sources)  are  indeed 
continuing.  Lie  claims  the  work  has  been  moved  to  classified — 


analysis,  and  collaboration  tools  for  counterterrorism  for¬ 
eign  intelligence  (our  emphasis),  as  described  in  the  Classi¬ 
fied  Annex  accompanying  the  Department  of  Defense 
appropriations  Act,  2004,  for  which  funds  are  expressly  pro¬ 
vided  in  the  National  Foreign  Intelligence  Program  for  coun¬ 
terterrorism  foreign  intelligence  purposes.  Ref:  [  1  ]  Section 
8  L31  .(a)  of  Fiscal  Year  2003  Defense  Appropriations  Act.”] 

“So,  what  Congress  has  done  is  that  they’ve  stopped  the 
research  in  the  privacy  protection  area  and,  in  my  opinion, 
that  eventually  is  going  to  be  a  problem  for  the  administra¬ 
tion,”  says  Poindexter. 

“The  privacy  work  was  part  of  what  was  canceled.  But  I 
think  it  should  continue.  And  I  think  that  eventually  it  will  be 
continued.  I’m  an  optimist.”  E0 


Senior  Editor  Scott  Berinato  can  be  reached  at  sberinato@cio.com. 
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Oracle  Grid 


turns  64  PC  servers 
into  a  giant  mainframe 


It's  fast... 
it's  cheap... 
and  it  never  breaks 


oracle.com/grid 
or  call  1.800.633.0753 

Note:  'Never  breaks'  indicates  that  when  a  server  goes  down,  your  system  keeps  on  running. 
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Pay-as-you-go  computing  me 
lot  of  things  to  a  lot  of  people.  1 
pass-along  guide  to  explain  to 
CEO  what  it  is— and  is  not. 

ansa  Reader  R01 

►  Learn  how  to  cut  through 

Jseour  thehype 

►  Determine  which  applications 

yOUr  are  appropriate  for  utility 

computing 

►  The  ROI  of  utility  computing 

IT’S  AN  APPEALING  VISION:  You  pay  for  computing 
power  and  software  only  when  you  need  it.  No  more  money 
wasted  on  expensive  computer  servers  that  are  woefully 
underused  most  of  the  time  and  software  programs  that  sit 
on  the  shelf.  Utility  computing  (UC)  is  IT  efficiency  on  a 
grand  scale  never  before  experienced — at  least  in  theory. 

But  what  is  utility  computing,  really?  Better  yet, 
what  does  it  mean  to  the  CEO?  Vendor  bombasts 
would  have  your  CEO  believe  that  the  brave,  new  util¬ 


ity  world  is  just  around  the  corner.  And  while  some 
businesses  are  already  taking  their  first  steps  toward 
utility  (using  existing  tools  and  practices),  this  rela¬ 
tively  new  form  of  computing  shouldn’t  be  on  every 
company’s  agenda. 

In  the  interest  of  making  the  CIO’s  life  a  little  easi¬ 
er,  we  provide  this  pass-along  guide  to  help  CEOs 
understand  whether  their  company  should  be  on  the 
utility  computing  path. 
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Utility  Computing 


WHAT  IS  UTILITY  COMPUTING? 

Pinning  down  a  definition  of  utility  computing  can  be  like  tying  a 
knot  in  a  snake;  just  when  you  think  you’ve  done  it,  the  bugger 
slithers  away. 

Nearly  every  major  vendor,  and  a  number  of  minor  ones,  are 
promoting  their  own  vision  and  brand  name  for  utility  comput¬ 
ing,  including  Agile  Computing,  On  Demand  Computing,  N1 
and  the  list  goes  on.  But  beyond  branding,  utility  computing  is 
about  providing  flexible  computing  resources  when  and  where 
they’re  needed.  These  resources  could  come  from  a  pool  of  com¬ 
puting  power  and  software  that  lives  inside  a  corporate  data  cen¬ 
ter,  and  is  metered  out  and  billed  to  departments  as  needed. 
External  service  providers  also  offer  such  resources,  akin  to  how 
Salesforce.com  currently  sells  subscription  CRM  services:  You 
pay  for  them  while  you  use  them  or  turn  them  off  and  don’t  pay 
another  dime. 

“You  can  provision  less  and  still  have  the  safety  margin  [to 
handle  unexpected  spikes  in  demand],”  says  Mike  Prince,  CIO  at 
Burlington  Coat  Factory,  which  is  currently  moving  to  a  utility 
computing  model  built  around  Oracle  databases  and  clusters  of 
Intel-based  hardware.  With  its  prior  setup — four  separate  Unix 
servers — Burlington  had  multiple  pools  of  computing  resources, 
with  every  one  of  them  being  bigger  than  necessary.  “None  [of  the 
servers]  peak  or  load  at  the  same  time  of  day,  day  of  the  month  or 
season  of  the  year.  You  don’t  need  a  20  percent  sludge  factor  on 
every  single  system.” 

That  sludge  factor  varies  dramatically  from  company 
to  company,  but  a  recent  report,  “‘Pay  As  You  Go’  IT  Ser¬ 
vices,”  by  analyst  firm  Saugatuck  Technology,  states  that 
businesses  often  have  50  percent  or  more  surplus  IT  capac¬ 


ity.  Utility  computing  promises  to  either  get  rid  of  that 
expensive  overhead  completely  or  put  the  surplus  to  work. 

WHY  IS  UTILITY  COMPUTING  TAKING  SO 
LONG  TO  ARRIVE? 

Most  of  the  major  hardware  vendors — including  IBM,  Sun  and 
Hewlett-Packard — offer  some  form  of  physical  infrastructure 
for  utility  computing  already  (such  as  HP’s  Utility  Data  Center). 
But  in  order  to  work,  utility  computing  requires  a  coordinated 
effort  between  hardware,  applications  and  management  soft¬ 
ware  that  can  perform  tasks  such  as  tracking  pools  of  computing 
resources.  The  hardware  and  management  software  has  arrived, 
at  least  in  early  forms,  but  it’s  all  still  largely  in  the  trial  stage  for 
many  enterprises.  And  getting  a  company  ready  for  utility  can 
take  some  serious  effort. 

In  today’s  typical  nonutility  scenario,  a  user  places  a  request 
with  an  application  on  a  departmental  server.  The  server  takes 
the  request  and  returns  the  answer,  then  goes  on  to  other  requests. 
If  no  other  requests  are  in  the  queue,  the  machine  sits  quietly  and 
acts  as  a  hyperexpensive  space  heater. 

With  utility  computing  (at  least  in  its  end-game  form),  that 
departmental  server  may  go  away  entirely,  usurped  by  a  collec¬ 
tion  of  machines  centrally  controlled  by  the  IT  department.  This 
could  be  accomplished  either  by  physically  replacing  remote 
servers  with  a  centralized  larger  server,  cluster  of  smaller  servers 
or  rack  of  blade  servers,  or  by  binding  the  remote  systems  into 
a  “grid.”  (For  definitions,  see  “A  Glossary  of  Utility  Terms,” 
this  page.)  When  the  user  makes  a  request,  a  series  of  questions 
must  be  answered  by  the  utility  infrastructure,  determining 
what  resources  the  user  gets  from  the  pool  while  tracking  usage 


A  GLOSSARY  OF  UTILITY  TERMS 

Demystifying  some  terms  associated  with  utility  computing 


Autonomic  computing:  The  IBM-promoted  idea  that  computer 
systems  should  be  “self-aware"  and  able  to  repair,  reconfigure, 
protect  and  reallocate  themselves  with  minimal  or  no  human 
intervention. 

Clusters:  Groups  of  computer  systems  tied  together  to  act  as  a  sin¬ 
gle  computing  unit.  Clusters  are  often  not  geographically  distrib¬ 
uted,  nor  can  machines  be  added  or  removed  on  an  ad  hoc  basis. 

Grid  computing:  The  concept  of  connecting  arrays  of  smaller 
computers  into  a  single  virtual  supercomputer.  Grids  often 
involve  large  numbers  of  geographically  dispersed  machines 
that  fall  out  of  or  are  captured  by  the  grid  as  they  become  avail¬ 
able.  Grid  is  largely  used  today  as  an  inexpensive  alternative  to 
supercomputers,  for  research  and  scientific  projects. 


Pay  as  you  go:  The  concept  of  paying  for  computing  power  on  a 
metered  basis  rather  than  simply  buying  a  piece  of  hardware 
and  a  software  license. 

Software  as  service:  Rather  than  purchasing  a  software  license 
for  a  number  of  users  or  CPUs  and  then  “owning"  that  software 
for  some  predetermined  time,  software-as-service  agreements 
allow  users  to  pay  for  a  piece  of  software  on  a  per-user  basis. 

Virtualization:  The  act  of  pooling  servers  or  storage  into  a 
larger  “virtual”  resource.  Rather  than  knowing  exactly  which 
machine  or  hard  drive  will  be  used,  users  simply  request 
enough  space  and  computing  power  from  the  pool  to  perform 
a  given  task.  The  goal  is  to  increase  utilization  levels  and 
reduce  costs.  -C.L. 
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UTILITY  COMPUTING  is  about  providing  flexible  computing 
resources  when  and  where  they’re  needed.  You  pay  for  them 
while  you  use  them  or  turn  them  off  and  don’t  pay  another  dime. 


for  billing  purposes. 

Such  a  level  of  flexibility  and  tracking 
requires  management  tools  that  are  cur¬ 
rently  in  their  infancy,  which  explains  why 
not  every  company  is  jumping  on  the  util¬ 
ity  bandwagon  (basing  your  company’s  IT 
life  on  a  bunch  of  relatively  untried  tools  is 
only  for  the  very  brave  or  the  foolhardy). 

But  the  real  holdup  for  utility  computing  is 
that  application  providers  have  yet  to  move 
en  masse  toward  UC-ready  licensing  mod¬ 
els.  “The  software  licensing  models  in  par¬ 
ticular  are  currently  the  barrier  to  utility 
pricing  models,”  says  Corey  Ferengul,  sen¬ 
ior  vice  president  at  Meta  Group.  Ideally, 
utility  computing  pricing  models  would 
allow  customers  to  pay  “  by  the  sip,  ”  much 
as  we  do  with  electricity  and  water.  But  soft¬ 
ware  vendors  are  still  predominantly  selling 
their  products  on  a  per-seat  or  per-CPU 
basis,  regardless  of  how  much  or  how  lit¬ 
tle  an  individual  seat  or  CPU  is  utilized. 

Vendors  are  reluctant  to  move  to  utility 
pricing  for  several  reasons,  with  fear  being 
the  biggest  factor.  A  large  migration  to  util¬ 
ity  pricing  would  likely  change  the  Wall 
Street  valuation  of  software  companies 
dramatically — almost  certainly  on  the 
downside  as  vendors  would  no  longer  be 
able  to  book  projected  future  revenue,  but 
instead  could  claim  only  what  they  collect 
each  month.  Utility  computing  also  prom¬ 
ises  to  make  it  easier  for  companies  to 
switch  software  vendors,  encouraging 
healthy  competition  and  reducing  margins. 

But  Ferengul  notes  that  smart  software  vendors  could  even¬ 
tually  take  advantage  of  what  may  look  like  a  bad  situation,  mov¬ 
ing  to  a  utility  pricing  model  and  locking  in  customers  despite 
utility’s  touted  flexibility  and  ease  of  vendor  switching.  “[With 
utility  computing]  my  goal  would  be  to  deploy  quickly,  in  hours 
or  days,  not  weeks,  months  or  years,”  Ferengul  says.  “You’re  not 
going  to  stop  and  evaluate  vendors  every  time.” 

And  like  it  or  not,  utility  will  arrive,  he  adds,  with  hardware 


vendors  pushing  it  as  the  new  model  for  delivery,  and  users  push¬ 
ing  for  software  models  that  match  their  hardware. 

HOW  DO  I  CUT  THROUGH  THE  HYPE  TO 
REALIZE  THE  PROMISE? 

Ask  any  IT  vendor  if  they  have  products  for  utility  computing, 
and  they’ll  likely  say  yes.  But  believe  it  or  not,  they  won’t  always 
be  telling  the  truth.  Here  are  two  common  misconceptions: 
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It’s  more  than  outsourcing.  Handing  over  your  entire  data 
center  to  an  outsourcer  and  paying  it  to  run  your  applications  on 
its  servers  is  not  utility  computing.  The  key  to  utility  is  per-use 
pricing.  Few  outsourcing  deals  offer  this  option;  IBM’s  much  bal- 
lyhooed,  2002  multibillion-dollar  deal  with  American  Express 
is  a  notable  exception.  If  your  users  don’t  utilize  any  computing 
resources  for  a  month,  and  you  still  get  a  bill  from  your  out¬ 
sourcer,  it’s  not  really  utility. 

It’s  more  than  virtualization.  Virtualization  is  the  act  of  con¬ 
solidating  server  power  and  storage  space  into  shared  pools.  In  a  vir¬ 
tualized  system,  you  may  not  know  exactly  what  machine  is 
running  your  database  query  or  on  what  disk  your  quarterly  report 
is  stored.  Those  details  are  handled  by  software.  This  is  a  big  step 
toward  utility,  but  it  doesn’t  go  all  the  way.  In  an  ideal  world,  UC 


utility.  “We’re  not  trying  to  replace  everything  out  there,”  says  Joe 
Heasley,  CIO  at  industrial  products  manufacturer  Gates.  He  notes 
that  some  applications — such  as  CAD  software — simply  perform 
better  on  local  servers  than  over  a  wire. 

But  in  cases  where  a  single  application  can  be  shared  among 
multiple  groups  or  where  applications  face  regular  peaks  and  slow 
periods,  utility  could  be  a  cost-efficient  solution.  From  there,  you 
need  to  select  the  proper  approach  for  your  company’s  situation. 

Consolidation  is  one  way  to  go.  Last  November,  Gates  began 
a  move  from  a  distributed-server  environment  to  a  centralized 
HP  Superdome  system  that  includes  HP’s  Instant  Capacity  on 
Demand  (iCOD)  feature.  With  iCOD,  Gates  can  turn  on  extra 
processors  as  needed  (and  turn  them  off  when  the  load  drops),  at 
a  reduced  cost.  “We  decided  that  consolidation — moving  to  an 


SENIORMANAGEMENT’SJOBwill  be  to  smooth  ruffled  feathers  as 
departmental  servers  evaporate  into  a  pool  of  resources  that  are 
controlled  by  the  IT  department  or  outsourced  to  service  providers. 


allows  IT  departments  to  bill  users  for  exact  usage — per  minute,  per 
transaction  or  the  like.  Determining  exactly  what  those  units  should 
be  is  one  of  the  big  questions  that  remains  to  be  answered. 

That’s  not  to  say  that  some  companies  won’t  opt  for  the  com¬ 
pletely  external  model.  When  American  Express  outsourced 
$4  billion  worth  of  IT  operations  to  IBM,  the  transaction  was  hailed 
as  possibly  the  first  large-scale  utility  computing  arrangement.  In 
reality,  the  deal  was  remarkably  similar  in  scope  to  any  other  multi¬ 
billion-dollar  outsourcing  arrangement.  What  differed  wasn’t  the 
technology,  but  the  pricing  model.  Instead  of  paying  a  flat  rate, 
AmEx  would  in  some  cases  pay  only  for  usage,  providing  signifi¬ 
cant  cost  savings.  AmEx  Executive  Vice  President  and  CIO  Glen 
Salow  has  claimed  that  there’s  potential  for  “hundreds  of  millions 
of  dollars”  in  savings  from  implementing  the  utility  model. 

IS  THERE  ANYTHING  REAL  ABOUT  UTILITY 
COMPUTING  THAT  CAN  BE  USED  TODAY? 

Yes,  but  you  need  to  choose  wisely.  For  example,  utility  is  likely 
to  prove  most  beneficial  in  situations  where  certain  high-cost 
applications  get  used  relatively  infrequently.  Two  companies  may 
run  the  same  engineering  package,  for  instance,  with  each  need¬ 
ing  five  seats.  But  one  company  might  use  the  package  once  a 
month,  while  the  other  runs  it  24/7.  For  the  low-use  company, 
utility  pricing  would  probably  appeal  because  the  company 
wouldn’t  have  to  pay  full  license  prices  for  a  rarely  used  product. 
But  the  high-use  company  would  likely  do  better  with  standard, 
per-user  licenses. 

In  addition,  certain  applications  don’t  lend  themselves  well  to 


environment  that  is  partitionable,  virtual  and  has  workload  man¬ 
agement  capabilities — gave  us  the  ability  to  take  that  combined 
horsepower  and  wield  it  where  we  need  it,  instead  of  being  shoe¬ 
horned  into  individual  machines,  ”  says  Heasley.  In  other  words, 
if  a  certain  application  suddenly  needs  more  resources,  the  new 
system  enables  Gates  to  floor  the  accelerator  and  have  the  busi¬ 
ness  respond. 

The  Gates  project  was  anything  but  small.  It  involved  identi¬ 
fying  some  42  applications — and  their  associated  hardware — 
that  were  prime  for  consolidation,  including  custom  ERP 
applications  at  its  Mexico-based  manufacturing  facilities.  In  fact, 
Gates  decided  to  use  the  Superdome  systems  to  host  all  of  its  Mex¬ 
ican  computing  resources  remotely.  “We  were  able  to  leverage 
our  infrastructure  here  without  adding  infrastructure  or  data  cen¬ 
ters  or  outsourcing  in  Mexico,”  Heasley  says.  And  under  the  new 
model,  Heasley’s  team  can  redistribute  computing  power  as  nec¬ 
essary  from  a  central  location.  It’s  worked  so  well,  Heasley  says, 
that  the  company  is  currently  working  on  consolidating  all  of  its 
ERP  systems — in  Mexico,  the  United  States  and  Canada — into  a 
single  instance  of  Oracle  ERP  at  headquarters. 

For  many  companies,  utility  computing  will  arrive  in  the  form 
it  did  at  Gates — disguised  under  names  like  “virtualization”  and 
“consolidation.”  As  servers  and  storage  become  consolidated, 
IT  will  need  tools  to  better  manage  workloads  and  increase  effi¬ 
ciency:  the  mantra  of  utility. 

Hosted  services,  meanwhile,  present  another  approach — one 
that  takes  the  servers  out  of  your  hands  entirely.  Four  years  ago, 
Royal  Caribbean  Cruise  Lines  began  using  Akamai  Edge 
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SEPTEMBER  21  —  22,  2004 

DONALD  E.  STEPHENS  CONVENTION  CENTER 
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Don’t  miss  Wireless  Sensing  Solutions™,  the  event  OEMs  and 
system  integrators  are  gathering  at  to  explore  the  power  of  wireless 
sensor  networking,  discuss  evolving  standards,  interoperability, 
technologies  and  product  strategy  that  will  revolutionize  business 
models  and  provide  direct  benefit  to  the  bottom  line. 


WHAT  WILL  YOU  ACHIEVE  AT  WSS  CONFERENCE? 


DISCOVER  how  to  introduce  new  progressive  products  from 
companies  that  are  leading  the  way...  Honeywell  international, 
Eaton  Corporation,  Invensys,  RAE  Systems,  GE  Global  Research 
Philip  Morris,  Coca-Cola  Company  and  BP. 
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UNCOVER  the  endless  applications  for  supply  chain  management, 
industrial  and  home  automation,  government,  homeland  security 
and  many  more! 


EXPLORE  and  capitalize  on  the  solutions  that  will  replace  wire 
and  lower  production  costs  while  increasing  productivity! 
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Utility  Computing 


computing  services  for  distributing  online  advertisements 
because  it  made  more  economic  sense  than  trying  to  build  a  geo¬ 
graphically  dispersed  server  network.  Then,  two  years  ago, 
RCCL  launched  a  successful  advertising  campaign  that  increased 
its  normal  load  by  four  to  five  times  as  customers  logged  on  to 
investigate  cruises.  “I  had  18  servers  and  needed  to  scale  up  to 
30,”  says  Mike  Sutten,  vice  president  of  IT  at  the  company.  “I 
have  pictures  of  some  of  our  technicians  with  servers  in  their 
hands  running  down  the  hallway.”  Techs  were  even  forced  to 
cannibalize  other  projects  to  keep  the  website  running. 

As  a  result,  RCCL  shifted  more  of  its  Web  operations  to  Aka¬ 
mai’s  servers,  culminating  in  the  piloting  of  some  J2EE  applica¬ 
tions  to  Akamai’s  globally  distributed  network  of  IBM 
WebSphere  servers — for  which  RCCL  pays  for  usage  only,  not 
software  licenses.  Those  applications  currently  access  data  that 
resides  on  RCCL’s  in-house  servers.  But  that  could  change,  as 
RCCL  gains  experience  with  Akamai  and  as  Akamai  rolls  out 
new  offerings,  Sutten  says. 

HOW  CAN  THE  CEO  HELP  US  IN  ADOPTING  A 
UTILITY  COMPUTING  MODEL? 

If  utility  is  to  take  hold,  cultural  change  will  be  a  key  challenge. 
By  its  very  nature,  utility  requires  centralization  and  the  shar¬ 
ing  of  resources  in  a  manner  that  many  companies  won’t  rec¬ 
ognize.  Senior  management’s  job  will  be  to  smooth  ruffled 
feathers  as  departmental  servers  evaporate  into  a  pool  of 
resources  that  are  controlled  by  the  IT  department  or  out¬ 
sourced  to  service  providers. 


Jonathan  Eunice,  an  analyst  at  Illuminata.  “That’s  why  the  CEO 
or  COO  or  CFO  at  a  minimum  have  to  have  a  say.” 

WHAT  IS  THE  ROI  FOR  UTILITY  COMPUTING? 

The  bottom  line,  of  course,  is  money.  Utility  computing  prom¬ 
ises  lower  licensing  costs  by  consolidating  multiple  instances  of 
applications  into  fewer  licenses,  and — once  pricing  models  are 
in  place — allowing  companies  to  pay  only  for  the  active  hours, 
transactions,  megabytes  or  bits  (the  exact  unit  remains  to  be  deter¬ 
mined  and  will  probably  vary  by  application).  It  also  promises 
reduced  maintenance  costs,  with  outsourced  UC  services  han¬ 
dling  some  operations  and  internal  IT  groups  freed  from  labori¬ 
ous  tasks  such  as  upgrading  countless  remote  servers  one  by  one. 
And,  as  in  Royal  Caribbean’s  case,  smaller  hardware  budgets  are 
possible,  thanks  to  fewer  servers  and  fewer  people  required  to 
manage  them.  The  ultimate  goal  will  be  to  create  a  technology 
framework  for  a  truly  agile  enterprise,  allowing  business 
processes  to  be  rebuilt  on  the  fly  to  meet  new  opportunities. 

But  that  may  not  matter  so  much  at  companies  that  already 
run  a  tight  IT  group.  “If  you’ve  got  an  organization  that  has  a 
good  centralized  policy  base,  that  has  strong  governance  on 
change  management  and  how  they  grow  their  IT  infrastructure, 
if  there’s  communication  between  business  units  and  IT,  then  the 
utility  model  is  probably  not  going  to  be  as  attractive  to  them,” 
says  Gartner  Principal  Analyst  Eric  Goodness.  Loosely  regulated 
IT  organizations,  however,  could  probably  benefit  from  utility’s 
simplification  and  control.  Unfortunately,  however,  those  organ¬ 
izations  are  going  to  be  the  least  prepared  for  a  move  to  utility. 


THE  ULTIMATE  GOAL  of  utility  computing  will  be  to  create  a 

technology  framework  for  a  truly  agile  enterprise,  allowing  business 
processes  to  be  rebuilt  on  the  fly  to  meet  new  opportunities. 


And  the  reverse  can  also  be  true,  with  IT  managers  getting 
peeved  when  line-of-business  leaders  request  utility  services 
instead  of  IT  assistance,  says  Mike  West,  senior  program  director 
at  Saugatuck.  “In  general,  the  person  who  is  most  enthusiastic 
about  [pay  as  you  go]  is  the  line-of-business  person  who  has  con¬ 
trol  of  his  P&L  but  not  his  IT,”  West  says.  “On  the  other  hand, 
CIOs  are  highly  skeptical  of  [the  model].”  The  reasons,  West 
says,  are  that  CIOs  are  often  averse  to  the  additional  risk  that 
new  technologies  can  introduce  and  because  they  see  themselves 
as  technology  gatekeepers. 

Given  that,  the  CEO  and  other  C-level  executives  must  step  in 
to  act  as  mediators  between  IT  and  the  line-of-business  man¬ 
agers.  “If  you’re  going  to  do  things  to  get  shared  resources  [such 
as  utility],  you’ve  got  to  bring  those  resources  together,”  says 
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“If  you’ve  got  anarchy,  you  don’t  know  what  your  unit  costs  are 
now,”  Goodness  says.  “It  is  going  to  take  some  up-front  elbow 
grease  to  get  [these  companies]  where  they  want  to  be.  ”  Without 
such  preparation,  he  notes,  utility  computing  may  actually  cost 
more  than  current  operations. 

Still,  certain  niche  utility  markets,  such  as  telecom  management 
services,  are  also  proving  cost-efficient  for  their  users.  “I’m  talking 
with  customers  that  are  saving  as  much  as  30  percent  off  their  cor¬ 
porate  telecom  spending  [using  such  services],”  says  Goodness. 

“It  does  work,  and  it’s  available  right  now,”  says  Burlington’s 
Prince.  “It  just  takes  more  engineering  than  it  ought  to.”  HE! 


Technology  Editor  Christopher  Lindquist  can  be  reached  via  e-mail  at 
clindquist@cio.com. 
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Just- m -Time 
Registration 

FIVE  YEARS  AGO  I  wrote  a  commentary  for  NPR.  In  it  I  advocated  the 
use  of  the  Internet  as  a  voting  platform. 

In  hindsight,  I  was  wrong.  And  a  recent  CIO.com  poll 
reports  that  nearly  70  percent  of  CIOs  don’t  have  faith  in  the 
results  of  a  digital  voting  system.  (See  “E-Voting  Debacle 
Looms,”  Page  18.) 

But  maybe  e-voting  was  the  wrong  electoral  application. 

The  most  shameful  legacy  of  the  2000  general  election  had 
nothing  to  do  with  hanging  chads,  but  rather  with  the  76  mil¬ 
lion  U.S.  citizens  who  decided  to  stay  home  and  not  vote.  While 
the  power  of  the  Internet  might  not  be  ready  for  prime-time 
voting,  it  can — and  must — be  put  to  use  in  facilitating  a  simple, 
yet  powerful,  concept:  same-day  voter  registration. 

In  the  most  recent  presidential  election,  just  under  60  percent 
of  U.S.  citizens  went  to  the  polls.  However,  five  states — Maine, 
Minnesota,  New  Hampshire,  Wisconsin  and  Wyoming — expe¬ 


rienced  voter  participation  rates  of  nearly  70  percent.  The  com¬ 
mon  denominator  in  each  of  those  states  is  a  same-day  voter 
registration  process  wherein  people  can  register  up  to,  and 
including,  the  day  of  the  election. 

Offering  same-day  registration  makes  sense.  When  does  a 
presidential  election  campaign  become  most  interesting?  In  the 
last  four  weeks  of  the  campaign.  But  in  many  states,  voter  reg¬ 
istration  systems  are  closed  down  by  that  time. 

In  19th  century  America,  voter  registration  was  not 
required,  and  80  percent  of  eligible  voters  (all  men,  of  course) 
participated. 

But  now  voter  registration  is  required.  And  while  secure, 
real-time  voting  on  the  Internet  still  may  be  futuristic,  now  is  the 
time  to  rally  behind  the  power  of  the  Internet  to  create  dynamic, 
easy-to-use  voter  registration  systems  that  allow  Americans  to 
register  to  vote  right  up  through  the  day  of  the  election. 

I  have  76  million  reasons  why  this  is  a  good  idea.  What  do 
you  think?  Drop  me  note. 
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By  Susan  H.  Cramm 

The  Unnatural  Selection 
Process  for  CIOs:  Why  most 
up-and-comers  aren’t  ready 
for  the  next  level 


How  comfortable  do  you 
find  the  hot  seat?  E-mail 
Leadership  and  Management 
Editor  Edward  Prewitt  at 
hotseat@cio.com. 


No  More  Secrets  to  CIO  Success 

A  study  reveals  that  CIOs  act  just  like  CEOs — with  one  big  difference 

BY  BETH  STACKPOLE 


Just  a  few  years  ago  during  the  dotcom 
boom,  it  became  fashionable  to  argue 
that  CIOs  were  poised  to  become  CEOs. 
It  was  believed  that  CIOs’  unique  enter¬ 
prise  perspective,  both  broad  and  deep, 
and  their  knowledge  of  IT — the  new 
arbiter  of  competitive  advantage — better 
qualified  them  to  ascend  to  the  top  spot 
than  managers  who  had  taken  more  tra¬ 
ditional  routes  up  the  ladder. 

A  few  CIOs  did  in  fact  become  CEOs 
(most  notably  Michael  Capellas  at  Com¬ 
paq  and  MCI,  Kevin  Turner  at  Sam’s 
Club,  and  Christopher  Lofgren  at  Schnei¬ 
der  National);  but  in  hind¬ 
sight,  that  prediction  was  way 
off  the  mark. 

Now  a  massive  study  of  all  types 
of  executives  shows  that,  in  fact,  suc¬ 
cessful  CIOs  and  CEOs  tend  to  be  quite 
similar  in  leadership  behavior — with  one 
important  difference  in  their  thinking 
styles.  Whereas  CEOs  (and  other  senior 
managers  such  as  CFOs)  tend  to  make 
decisions  very  quickly,  zeroing  in  on  one 
workable  solution  and  taking  immediate 
action,  CIOs  tend  to  evaluate  situations 
from  a  variety  of  perspectives  before  com¬ 
ing  up  with  multiple  solutions. 

Using  data  compiled  from  more  than  a 
half-million  top  executives  (nearly  1,500 
of  whom  were  senior-level  IT  leaders), 
executive  recruitment  and  development 
company  Korn/Ferry  International  has 
developed  a  statistically  valid  success  pro¬ 
file  for  CIOs.  Leading  CIOs  and  CEOs, 
according  to  the  research,  both  are  highly 
adaptive  and  open  to  change.  Successful 
execs  of  both  stripes  also  have  a  good  sense 
of  humog  are  likable,  and  are  excellent  col¬ 
laborators  and  team  players. 

This  finding  confirms  the  views  of  the 
CIO  profession  of  Ron  Ponder,  who  has 


accumulated  a  breadth  of  experience  like 
few  other  IT  execs.  Ponder,  who  in  July 
was  named  CIO  of  WellPoint  when  it 
merged  with  Anthem  to  become  the 
nation’s  largest  ELMO,  says,  “If  you  look 
at  CEOs  or  COOs  or  CMOs,  the  guys 
who  rise  to  the  top  have  a  set  of  qualities 
that  enable  them  to  do  that.  The  CIO  is 


<>* 


no  different.  They’ve  just  chosen  technol¬ 
ogy  as  the  route,  while  the  others  chose 
something  different.  We  all  wind  up  at  the 
same  place.” 

Korn/Ferry’s  leadership  profile  should 
put  to  rest  the  hackneyed  stereotype  that 
CIOs  lack  personality.  “There’s  long  been 
a  myth  that  CIOs  are  extremely  intelli¬ 
gent,  can  create  systems  and  deal  well 
with  complex  data  but  are  not  very  social 
or  outgoing,”  says  Gary  Hourihan,  pres¬ 
ident  of  Korn/Ferry’s  strategic  manage¬ 
ment  assessment  practice.  “Yet  it’s  clear 
the  better  CIOs  design  systems  to  reflect 
the  strategy  of  the  business,  interface  reg¬ 
ularly  with  other  senior  management  and 
are  not  icons  sitting  in  their  offices.” 
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Profiles  in  Success 

Korn/Ferry’s  executive  leadership  assess¬ 
ment  started  out  as  an  adjunct  to  its 
recruitment  database,  in  which  the  com¬ 
pany  has  long  compiled  all  kinds  of  job 
history  and  salary-related  information  on 
a  variety  of  professionals,  from  supervi¬ 
sors  to  C-level  executives.  The  company 
added  a  leadership  component  to  focus 
on  the  behavioral  requirements  of  job 
openings,  rather  than  matching  skills  sets, 
as  is  traditional  in  the  recruitment  busi¬ 
ness.  After  evaluating  various  assessment 
tools,  Korn/Ferry  settled  on  one  created 
by  Decision  Dynamics,  a  firm  founded  by 
academic  specialists  in  career  assessments. 
A  notable  aspect  of  the  Decision  Dynam¬ 
ics  methodology  is  the  thinking  style  of 
executives,  which  Korn/Ferry  managers 
felt  provided  a  more  complete  picture  of 
an  individual  than  do  other  leadership 
tools  on  the  market,  such  as  the  popular 
Myers-Briggs  assessment  test. 

The  Korn/Ferry  profile  is  administered 
online.  Executives  registering  at  the 
recruitment  website  are  asked  to  complete 
a  two-part  questionnaire  that  measures 
their  responses  to  hypothetical  situations. 
The  results  are  fed  back  into  the  main 
database.  The  top  20  percent  and  bottom 
20  percent  in  each  job  category  are  com¬ 
pared  after  sorting  the  data  by  three  fac¬ 
tors:  compensation,  career  trajectory  and 
the  quality  of  company.  Smaller-name 
companies  are  weeded  out,  for  example, 
as  are  candidates  without  vice  president 
or  senior  executive  titles.  From  there,  the 
behavioral  styles  of  the  upper  echelon 
CIOs  are  compared  and  contrasted  with 
the  lower  ranks.  In  addition,  successful 
CIO  traits  are  weighed  against  those  of 
successful  CEOs. 

The  goals  of  the  exercise  are  to  deter¬ 
mine  if  successful  CIOs  have  fundamental 
differences  in  leadership  style  relative  to 
their  less  successful  counterparts,  and  to 
see  if  they  share  traits  with  the  rest  of  top 
management.  The  answer  came  back  a 
resounding  yes  on  both  counts.  What  the 


research  shows  above  all,  Hourihan  says, 
is  that  effective  CIOs,  along  with  the  rest 
of  the  upper  management  team,  have 
moved  away  from  the  command-and- 
control  leadership  approach  to  a  strong, 
interactive  style.  “There  are  better  trained, 
smarter  people  coming  up  through  the 
management  ranks  demanding  to  be 
heard,  and  that’s  made  a  difference  in  how 
companies  are  managed,”  he  says. 


ion  cannot  be  accomplished  by  an  auto¬ 
crat  or  superexpert.” 

Being  a  mere  order-taker  doesn’t  cut  it 
either,  given  that  users  often  don’t  know 
what  they  need  and  lack  a  real  feel  for 
the  potential  of  new  technology.  “You 
must  become  part  of  the  fabric  of  the 
business,”  advises  Ponder.  “You  can’t  just 
sit  around,  listen  and  take  orders,  and 
you  can’t  always  talk  about  the  latest 


LEADERSHIP  BEHAVIOR 

Change  Your  Image 
or  Change  the  Lens 


Once  you’re  familiar  with  your  behav¬ 
ioral  style,  you  don’t  have  to  let  it  keep 
you  in  a  box.  It  is  possible  to  modify 
your  style  through  coaching— and  a 
lot  of  introspection.  But  it’s  not  easy. 

In  their  book  The  Dynamic  Decision 
Maker,  Ken  Brousseau  and  his  co¬ 
authors  at  Decision  Dynamics,  the 
developers  of  the  Korn/Ferry  leadership 
assessment,  discuss  ways  for  execu¬ 
tives  to  change  their  behavioral  styles. 
Toning  down  a  particular  style,  rather 
than  changing  it  outright,  is  the  more 
realistic  route.  To  do  so,  the  authors 
suggest  first  understanding  the  poten¬ 
tial  pitfalls  of  a  particular  style,  then 
regularly  anticipating  those  problems 


and  planning  actions  to  avoid  them. 

An  all-out  change  of  your  style  is  a 
different  ball  game.  To  accomplish  this, 
executives  must  either  change  the 
amount  of  information  that  they  need 
to  make  decisions,  or  decrease  the 
number  of  problems  that  they  generate 
or  to  which  they  respond.  Practicing 
your  new  style  frequently  to  shed  old 
habits  and  being  realistic  about  gradual 
change  are  the  keys  to  success. 

Keep  in  mind,  though,  that  no  style  is 
inherently  bad  or  good— just  bad  or  good 
for  a  particular  situation.  Sometimes  the 
more  appropriate  measure  is  to  change 
situations  rather  than  deep-seated 
personal  styles.  -B.S. 


Given  the  complexity  of  today’s  global 
marketplace,  all  varieties  of  top  execu¬ 
tives — from  technology  chieftains  to  mar¬ 
keting  gurus — realize  that  they  need  to 
solicit  information  from  others  to  make 
the  best  decisions  without  being  blind¬ 
sided.  That  lesson  applies  particularly  to 
CIOs,  says  Ken  Brousseau,  CEO  of  Deci¬ 
sion  Dynamics.  “If  users  are  unhappy 
and  not  using  the  technology,  then  the 
whole  IT  strategy  goes  to  hell  in  a 
handbasket.  Yet  tying  IT  and  business 
together  in  some  sort  of  coherent  fash- 


technology  gig.  You  have  to  understand 
how  to  weave  technology  into  the  entire 
strategy  of  the  business.” 

Therefore,  for  CIOs  to  be  successful, 
they  need  social  and  behavioral  qualities 
that  can  help  them  tap  into  what  their 
constituents  really  need:  what’s  dubbed  a 
“social-participative”  style.  On  a  leader¬ 
ship  level,  CIOs  with  the  best  track 
records  in  the  Korn/Ferry  assessment 
score  high  on  their  ability  to  seek  out  the 
input  of  others  and  facilitate  consensus¬ 
building,  working  through  issues  with 
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peers  and  subordi¬ 
nates.  From  an  emo¬ 
tional  standpoint,  the 
successful  CIOs  have 
been  shown  to  have 
high  levels  of  confi¬ 
dence  and  empathy — the  latter  character¬ 
istic  being  critical  to  their  ability  to  deal 
with  many  different  personality  types. 


I  Think,  Therefore  I  Am  a  CIO 

Where  successful  CIOs  veer  off  from 
the  rest  of  upper  management  is  in 
their  thinking  style,  which  the  Decision 
Dynamics  assessment  defines  as  the  way 
people  act  when  they  are  absorbed  in  a 
problem  or  comfortable  with  an  individ¬ 
ual.  Leading  CIOs  have  what’s  called  a 
“creative-complex”  style,  which  means 
that  they  put  emphasis  on  collecting  data 
and  contemplating  all  of  their  alternatives 
before  putting  anything  into  action.  These 
CIOs  typically  come  up  with  multiple 
courses  of  action  for  any  particular  prob¬ 
lem,  and  will  reexamine  their  decisions 
and  make  adjustments  as  required.  As 
pressure  mounts,  successful  CIOs  will 
pull  the  trigger.  But  they  won’t  do  so  as 
quickly  and  definitively  as  other  execu¬ 
tives,  including  CEOs,  who  tend  to  “sat¬ 
isfice” — a  term  for  acting  decisively  with 
just  enough  information. 

This  difference  goes  hand-in-hand 
with  the  CIO  role,  notes  Hourihan.  CIOs 
shouldn’t  be  making  snap  decisions  with¬ 
out  examining  all  the  relevant  support¬ 
ing  data.  Ponder  adds,  “Successful  CIOs 
today  have  the  same  qualities  of  leader¬ 
ship  that  would  make  a  person  a  good 
CFO  or  COO  or  CEO.  But  unlike  many 
of  the  other  senior-level  managers  in  a 
company,  the  CIO  lies  at  the  crossroads 
of  the  business.  Therefore,  they  need  to 
have  that  all-around  view  in  terms  of 
understanding  the  entire  business  because 
they  serve  the  entire  business.” 

Even  so,  it’s  hard  to  separate  out  causes 
and  results  of  thinking  styles.  This  one  area 
of  difference  between  successful  CIOs  and 


MANAGEMENT  REPORTS 

All-Time  Low  for  Employee  Morale 


Dissatisfied  IT  workers 
have  nowhere  to  go— 
for  now 

Much  has  been  made  of  IT  jobs  lost  to 
offshore  outsourcing,  but  what  about 
the  workers  who  are  still  here?  A  large 
study  of  IT  staffing  trends  shows  that 
improving  economic  news  has  yet  to 
translate  into  major  hiring.  At  the  same 
time,  workloads  haven’t  decreased  for 
most  IT  workers;  offshoring  is  still  a 
relatively  small  phenomenon  limited  to 
a  few  companies.  As  a  result,  domestic 
IT  workers  are  overburdened,  with  an 
attendant  impact  on  morale,  according 
to  the  Meta  Group  consultancy. 

Meta  Group  surveyed  650  compa¬ 
nies  of  various  sizes  for  its  “2004  IT 
Staffing  and  Compensation  Guide,” 
the  sixth  report  in  the  annual  series. 
Although  81  percent  of  the  respon¬ 
dents  said  they  were  hiring  this  year, 
the  new  staffers  were  brought  on 
largely  to  fill  existing  positions  that  were 
vacated.  The  total  headcount  for  IT  staff 
was  nearly  unchanged  from  2003. 

Morale  for  these  workers  is  at  an 
all-time  low;  according  to  feedback 
from  employee  satisfaction  surveys, 
performance  reviews,  suggestion 
boxes  and  other  means,  72  percent  of 
IT  organizations  indicated  a  morale 
problem.  The  key  driver  for  low  morale 
is  the  continuing  lack  of  job  growth. 

To  redress  low  morale,  68  percent  of 
the  companies  in  the  study  took  action, 
while  32  percent  did  nothing.  The  top 
two  responses  were  employee  recogni¬ 
tion  events  and  skill  development 
opportunities,  each  cited  by  nearly  half 
of  the  responsive  companies.  Other 
popular  correctives  were  career 
development  programs,  annual  action 
plans  and  more  challenging  work. 


Notably  missing  from  the  morale 
boosters  were  the  two  actions  that 
probably  would  be  most  effective: 
hiring  more  workers  (cited  by  only 
2  percent)  or  paying  bonuses  to 
existing  staff  (4  percent). 

Historically,  the  consequence  of 
low  morale  is  poor  employee  retention. 


Yet  two-thirds  of  the  companies  in  the 
survey  said  retention  of  IT  workers  is 
not  a  problem— simply  because  the 


dissatisfied  have  nowhere  else  to  go, 
opines  Meta  Group.  When  hiring 
picks  up,  however,  companies  that 
have  neglected  their  workforce  could 
suddenly  find  retention  a  serious  issue. 

Meta  Group's  prescription  for 
increasing  morale  is  to  build  a  sophis¬ 
ticated  “human  capital  management" 
capability  (a  surprising  recommenda¬ 
tion  from  a  consultancy  with  no  HR 
practice).  But  Meta  Group  cites  a 
finding  that  only  a  quarter  of  the 
largest  2000  companies  around  the 
world  employ  one  or  more  people  as 
HR  specialists  for  the  IT  organization. 
When  it  comes  to  caring  for  their  IT 
staffers,  many  companies  seem  to 
have  a  long  way  to  go. 

-Edward  Prewitt 
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LIU  Magazine  Group  Publisher  Gary  Beach  Speaks  with 
Karsten  Sorensen  of  York  International 


Looking  to  grow  its  global  service  businesses  and  expand  its  leadership  position,  York  in  2003 
invested  in  three  strategic  IT  initiatives.  Chief  among  them:  VISTA,  an  integration  effort  aimed  at 


enabling  common  procedures,  processes  and  operations  through  global  shared  business 
processes  and  systems. 


ABOUT  YORK 

York  International  is  the 
largest  independent  supplier 
of  heating,  ventilating, 
air-conditioning  and 
refrigeration  equipment  in 
the  United  States  and  a 
leading  competitor 
internationally. 


•  What  motivated  York  to  launch  Project  VISTA  using  Ascential  software? 

As  a  global  enterprise,  we  currently  have  four  strategic  objectives: 

>  Grow  our  global  service  businesses 

>  Expand  our  leadership  position  in  China 

>  Increase  margins  in  our  equipment  businesses 

>  Grow  our  unitary  and  middle-market  businesses. 

We  have  acquired  more  than  100  companies  over  the  past  10  years,  but  we  haven't  integrated 
their  systems.  When  we  looked  at  our  systems  around  the  company,  we  realized  that  if  you've  got 
35  different  ERP  systems  with  different  data  structures  and  different  ways  of  looking  at  the  model 
data,  you  need  some  kind  of  standardization.  So  we  decided  to  find  a  solution  that  could  cover  all 
of  our  subsidiaries  and  approach  it  from  a  business  standpoint — not  an  IT  standpoint — through  a 
transformation  project. 

This  is  all  about  business  transformation.  We're  selling  the  same  products,  parts  and  services  all 
over  the  world.  Why  should  the  business  processes  or  data  be  different? 


About  Karsten  Sorensen 

Karsten  served  as  York's  CIO 
until  September  2003.  He  cur¬ 
rently  serves  as  Executive  IT 
Leader  within  VISTA. 

Visit  ascential.com/cio  to 

receive  a  complimentary  copy 
of  The  Essential  Guide  to 
Accessing,  Consolidating,  and 
Trusting  Your  Data. 


* Ascential 

Software 


•  What  are  some  of  the  important  qualities  you  sought  in  a  technology  solution  to  your 
integration  challenge? 

The  first  thing  we  looked  for  was  a  solution  set  that  would  help  us  look  at  the  data  in  a  structured 
and  intelligent  way,  so  that  we  could  deliver — and  measure — our  services  globally,  and  grow  our 
business  efficiently.  We  searched  the  market  and  looked  for  a  solution  that  could  provide  a  single 
view  of  products,  customers,  partners  and  suppliers  through  a  Master  Data  Management  plan. 
Ascential  Software  was  able  to  deliver  on  these  requirements.  To  be  an  effective  global  business, 
we  must  be  able  to  measure  and  control  business  units  in  a  standard  fashion,  and  we  must  be 
able  to  offer  every  customer  a  common  level  of  service  and  interactions,  regardless  of  where 
we’re  doing  business  with  them. 

•  What  are  your  ROI  goals? 

We  know  we  cannot  fulfill  our  global  strategies  without  properly  standardizing  our  data  and 
processes.  To  measure  our  progress,  we're  looking  for  improvements  in  our  overall  business  per¬ 
formance,  as  well  as  specific  enablement  of  our  global  service  strategy. 

•  What  advice  would  you  give  to  other  executives  facing  similar  challenges? 

It's  all  about  the  data.  Before  you  think  about  the  system  and  the  processes,  you  must  think  about 
the  data.  If  you  don't  have  the  data  right,  and  if  you  don't  have  the  solution  to  help  you  get  it  right, 
then  it  doesn't  matter  what  system  you  use.  If  you  have  poor  data,  you  have  a  poor  system. 


ascential.com/cio 


others  in  upper  man¬ 
agement  may  very  well 
explain  why  more  IT 
heads  don’t  culminate 
their  careers  by  land¬ 
ing  the  top  executive 
spot.  While  many  of  the  behavioral  quali¬ 
ties  of  Korn/Ferry’s  leadership  profile  can 
be  modified  with  training — learning  bet¬ 
ter  listening  skills,  for  example,  or  being 
coached  on  how  to  be  more  adaptive  and 
entertain  multiple  solutions — it’s  much 
tougher  to  alter  an  innate  personality  trait 
such  as  thinking  style. 

Nonetheless,  Ponder  is  confident  that 
CIOs  have  the  right  stuff  for  the  corner 
suite.  “It’s  still  not  a  traditional  route, 
probably  due  to  the  fact  that  it  takes  a 
long  time  for  images  and  beliefs  to  go 
away.  And  today,  the  classical  image  of 


“Successful  CIOs 
today  have  the  same 
qualities  of  leadership 
that  would  make  a 
person  a  good  CFO 
or  COO  or  CEO.  But 
the  CIO  lies  at  the 
crossroads  of  the 
business.  Therefore, 
they  need  to  have  that 
all-around  view  of  the 
entire  business.” 

-Ron  Ponder,  CIO  of  WellPoint 


the  CIO  as  a  technologist  still  exists,”  he 
says.  But  he  sees  that  slowly  changing: 
“As  technology  continues  to  permeate  the 
fiber  of  a  company,  you’ll  see  more  skilled 
and  versatile  CIOs  come  up  through  the 
ranks  with  mentoring  and  the  exposure 
many  of  us  had.”  E3I3 


Beth  Stackpole  ( bstack@stackpolepartners.com ) 
is  a  freelance  writer  in  Newbury,  Mass.  Send  your 
comments  on  this  article  to  hotseat@cio.com. 


Leadership  Agenda  by  susan  h.cramm 

The  Unnatural 
Selection 
Process  for  CIOs 

Why  most  up-and-comers  aren’t  ready  for  the  next  level 

If  you  aspire  to  the  CIO  role,  it’s  time  to  get  real  about 
career  development.  Most  people  assume  that  when  the 
time  is  right,  they  will  have  a  good  shot  at  getting  the  top 
IT  job  in  their  company.  Sorry  to  say,  but  odds  are  that  it’s 
not  going  to  happen. 

If  you  don’t  believe  me,  consider  your  current  CIO.  It’s 
almost  a  sure  bet  that  he  or  she  was  hired  into  the  posi¬ 
tion  from  outside.  When  the  time  comes  and  you  realize  that  the  top  spot  at 
your  organization  is  not  coming  your  way,  you  will  likely  leave  for  a  CIO  job  at 
a  smaller  company  or  settle  in  as  number  two  or  three— reconciling  your  lot 
while  wondering  why  years  of  loyal  and  successful  service  were  not  enough. 

You  might  think  this  is  unfair,  but  there  is  a  good  reason  that  most  compa¬ 
nies  look  outside  for  their  CIOs:  Most  of  you  aren't  ready.  In  the  lexicon  of 
organizational  development  PhDs,  you  haven’t  accumulated  the  necessary 
experiences.  These  experiences  are  derived  from  years  spent  in  the  right 
types  of  assignments. 

To  accumulate  the  right  experiences  yourself,  you  need  to  manage  your 
career,  not  just  your  staff.  Mentors  are  hard  to  find  and  most  CIOs  don’t  give 
succession  development  much  thought.  I  call  this  the  unnatural  selection 
process  for  CIOs.  You  can  change  this  process,  though,  by  asking  for  the  right 
jobs  at  the  right  times  in  your  career. 

To  prepare  for  a  CIO  role,  you  have  to  learn  the  business  of  IT.  The  various 
IT  lines  of  business  form  an  IT  value  chain,  composed  of  customers,  relation¬ 
ship  managers,  developers,  operators,  service  providers  and  staff. 

If  you  want  to  become  a  good  CIO,  you  need  to  work  in  most  (if  not  all)  of 
these  IT  functions  because  running  IT  is  a  matter  of  managing  contending 
opposites— generating  shareholder  value  while  investing  in  the  future  while 
delivering  great  customer  service  while  operating  efficiently.  If  you  limit  your 
experience  to  a  single  function,  such  as  application  development,  you  will 
have  little  understanding  of  the  impact  of  the  technology  footprint  on  operat¬ 
ing  costs,  for  example,  or  the  relative  importance  of  help  desk  service  issues 
on  the  overall  perception  of  IT. 

That  being  said,  not  all  IT  lines  of  business  are  created  equal.  The  busi¬ 
ness  customers  want  to  work  with  one  of  their  own  and  therefore  want  CIOs 
who  understand  the  business  and  have  a  proven  delivery  track  record.  That’s 
why  most  CIOs  hail  from  the  application  developer  function.  That’s  also  why 
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it’s  so  important  to  gain  exposure 
outside  of  IT:  to  learn  the  business 
and  foster  relationships  with  senior 
executives  who  will  help  sponsor  your 
career. 

While  you  are  looking  for  opportu¬ 
nities  that  provide  exposure  to  vari¬ 
ous  IT  functions,  also  consider 
assignments  that  are  jam-packed  with 
challenges.  In  his  book  High  Flyers: 
Developing  the  Next  Generation  of 
Leaders,  Morgan  McCall  identifies 
seven  job  assignments  that  often  play 
an  important  role  in  leadership 
development.  These  are  early  work 
experiences,  first  supervision,  start¬ 
ups,  turnarounds,  changes  in  scope, 
task  force  assignments  and  line-to- 
staff  switches. 

Early  experiences.  From  the  start, 
you  need  to  actively  manage  your 
career  as  an  individual  contributor. 

This  is  when  it  is  easiest  to  move 
across  the  various  IT  lines  of  business 
and  learn  how  to  work  with  colleagues 
and  managers  who  have  backgrounds 
that  differ  from  your  own.  As  you 
advance  up  the  career  pyramid,  cross¬ 
functional  moves  become  fewer  and 
farther  between. 

First  supervision.  Most  executives 
wish  they  had  more  experience  man¬ 
aging  people  earlier  in  their  careers— 
when  their  mistakes  were  not  quite  so 
visible.  Look  for  early  supervisory 
opportunities,  even  if  it  means  moving 
to  less  glamorous  roles  (for  example, 
from  application  development  analyst 
to  help  desk  supervisor). 

Startups.  If  you  really  want  to 
understand  the  CIO  role,  find  a  startup 
assignment  in  which  you  are  expected 
to  build  something  without  instruc¬ 
tions— for  instance,  integrating  the 
systems  from  a  newly  acquired  busi¬ 
ness,  helping  start  up  operations  in  a 
new  country  or  creating  a  consoli¬ 
dated  data  center.  These  are  roles  that 
will  challenge  your  ability  to  set  goals, 


gain  resources  and  support,  and 
manage  issues  ranging  from  the 
strategic  to  the  mundane. 

Turnarounds.  Almost  every  avail¬ 
able  CIO  job  has  some  aspects  of  a 
turnaround.  You  need  to  prove  that 
you  can  analyze  the  current  situation 
and  implement  a  plan  that  will  ele¬ 
vate  performance  under  tight  time 
and  budget  constraints.  To  identify 
these  opportunities,  look  for  a  cus¬ 
tomer  who  is  unhappy,  an  expense 
that  is  out  of  control  or  a  project  that 
is  long  overdue. 


If  you  really  want 
to  understand  the 
CIO  role,  find 
a  startup 
assignment  in 
which  you  are 
expected  to  build 
something  without 
instructions. 


Changes  in  scope.  These  are 
leadership  roles  that  offer  you  new 
challenges  in  one  or  more  of  three 
components:  the  number  of  people 
managed,  the  level  of  financial 
accountability  and  the  diversity  of 
functions.  These  positions  will  test 
your  ability  to  handle  the  unfamiliar 
and  manage  performance  through 
others  by  “remote  control.”  Within  IT, 
most  of  these  roles  are  in  the  opera¬ 
tions  and  services  functions,  and  they 
are  often  overlooked  by  up-and- 
coming  development  managers  as 
areas  for  leadership  development. 

Task  force  assignments.  One  of  the 
best  ways  to  gain  business  knowledge 
and  develop  relationships  outside  IT  is 
by  working  on  a  strategically  important 


task  force.  It  is  likely  that  you  will  need 
to  volunteer  (and  sell  yourself),  since 
task  forces  are  usually  run  by  non-IT 
leaders  and  your  name  will  not  be  at 
the  top  of  their  lists. 

Line-to-staff  switches.  The  IT  staff 
functions  define  the  rules  for  the 
rest  of  the  IT  organization:  strategy, 
governance,  standards,  financial  and 
headcount  targets,  processes  and 
metrics  fall  under  the  “office  of  the 
CIO.”  Joining  the  IT  staff  will  teach 
you  how  to  influence  others  without 
formal  authority,  give  you  a  (some¬ 
times  not  so  pleasant)  bird’s-eye 
view  into  IT,  and  get  you  up  close 
and  personal  with  the  CIO,  business 
executives  and  IT  leaders. 

Before  you  become  a  direct  report 
to  a  CIO,  try  to  make  sure  you  have 
been  exposed  to  multiple  IT  functions, 
in  challenging  assignments  that 
promote  learning,  self-awareness  and 
relationships  across  the  organization. 
This  may  mean  that  you  forgo  near- 
term  promotion  prospects  and  make 
lateral  moves  in  your  30s  to  be  posi¬ 
tioned  right  for  your  40s.  Understand 
that  you  will  need  to  communicate 
your  career  development  goals  and 
the  types  of  roles  you  would  like,  be 
patient  and  ask  for  feedback  along 
the  way. 

Many  a  talented  professional  has 
been  lured  to  a  job  only  to  find  himself 
working  in  a  dead-end  role  under  a 
powerless  executive.  The  best  way  to 
manage  your  career  is  to  remain 
humble  and  look  for  the  right  skill¬ 
building  experiences  under  the  right 
leaders  rather  than  jump  at  the  first 
promotion  that  comes  along.  HE! 


To  see  reader  questions  and  answers  from 
Susan  H.  Cramm,  go  to  www.cio.com/leadership/ 
agenda.html.  Cramm  is  founder  and  president  of 
Valuedance  ( www.valuedance.com ),  an  executive 
coaching  firm  in  San  Clemente,  Calif.  You  can 
contact  her  at  susan@valuedance.com. 
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Pacific  Design  introduces  fresh  design,  functionality, 
and  value,  with  our  full  selection  of  carrying  cases  for 
notebook  computers.  Pacific  Design  cases  are  available 
through  all  IT  resellers. ..and  you’ll  be  surprised  how 
affordable  smart  design  can  be. 


Urban  Executive  for  Women 

A  fresh  approach  to  a  computer  carrying  case,  the 
beautiful  Urban  Executive  from  Pacific  Design  is  specially 
designed  for  a  woman's  comfort  and  convenience.  Made 
of  soft  Napa  Leather  and  Jacquard  Nylon,  this  case  has 
room  for  both  mobile  tech  and  personal  items. 


Leather  Classic  PC  Brief 

The  Classic  features  great  functionality,  style,  durability, 
and  the  luxury  of  Napa  Leather.  This  professional  case 
offers  a  padded  computer  compartment  and  dedicated 
storage  for  all  your  essentials,  allowing  for  a  more 
productive  mobile  life. 


RollingDeluxe 


The  multiple  award-winning  Rolling  Deluxe  is 
the  best  rolling  case  available.  Expansive 
interior  comfortably  holds  laptop,  projector, 
accessories,  and  overnight  clothes.  Meets  all 
international  airline  carry-on  requirements. 


888.797.8755 


To  view  our  entire  line  of  products,  go  to: 

www.pacificdesign.com 
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COVER  STORY 
Home  Improvements 

By  Meridith  Levinson  I  34 

As  Home  Depot  became  an  icon  of 
American  business  in  the  1980s  and 
1990s,  it  relied  heavily  on  home¬ 
grown  systems  to  fuel  its  rapid  growth.  By 
building  its  own  applications,  the  country’s 
second-largest  retailer  avoided  the  complica- 
rions  of  customizing  off-the-shelf  software.  But 
as  the  chain  grew  beyond  1,000  stores,  the  in- 
house  systems  became  too  costly  to  support. 
And,  as  Home  Depot  moved  into  more  mar¬ 
kets,  same  store  sales  growth  began  to  slow. 

At  the  same  time,  its  closest  rival,  Lowe’s, 
began  its  own  program  of  expansion,  winning 
back  the  home-improvement  business  it  had 
lost  to  Home  Depot  in  the  ’90s.  In  response, 
a  new  Home  Depot  CEO  and  a  new  CIO 
championed  a  move  to  off-the-shelf  software 
and  a  strategic  emphasis  on  customer  self-serv¬ 
ice  as  opposed  to  high-touch  service.  Lowe’s 
and  Home  Depot  continue  to  look  for  the 
right  balance  between  employees  helping  cus¬ 
tomers  and  customers  helping  themselves. 

The  question  is  which  will  win  out. 


“I  think  the  current  group  in 
IT  is  both  more  willing  to 
tackle  big  transformational 
change  and  move  more 
to  partnering  better  with 
the  business.” 

-JOHN  BEASLEY.  FORMER  DIRECTOR 
OF  OPERATIONS  STRATEGY  FOR 
HOME  DEPOT 


The  SCO  Slugfest  By  Scott  Berinato  I  42 

WORRIED  ABOUT  THE  LEGAL  COMPLICATIONS  threatening  the  free  future  of  Linux? 
If  you’re  already  an  open-source  code  user  wondering  about  your  potential  liabilities,  here’s 
a  comprehensive  set  of  crib  notes  to  the  landmark  legal  battles  being  fought  by  The  SCO 
Group,  which  claims  that  its  proprietary  Unix  code  has  been  mixed  into  Linux-based  prod¬ 
ucts.  We  highlight  the  claims  and  the  legal  opinions  on  SCO’s  lawsuit  against  IBM,  IBM’s 
countersuit,  as  well  as  Red  Hat’s  suit  against  SCO.  We  look  at  SCO’s  attempts  to  prosecute 
Linux  users  AutoZone  and  DaimlerChrysler.  And  we  include  a  who’s  who  of  powerful  anti- 
SCO  and  pro-SCO  power  brokers,  and  recap  the  various  conspiracy  theories  circulating 
about  Microsoft,  Sun  Microsystems  and  IBM. 


Poindexter  Comes  in  from  the  Cold  By  Scott  Berinato  I  48 

IN  HIS  MOST  DETAILED  DISCUSSION  since  leaving  DARPA,  retired  Adm.  John 
Poindexter  speaks  with  CIO  about  DARPA’s  controversial  and  now  dissolved  Total  Informa¬ 
tion  Awareness  (TLA)  project,  an  effort  to  collect  transactional  information  associated  with 
everyday  citizen  activities  and  examine  it  for  patterns  that  might  suggest  terrorist  activity. 
Programs  like  TIA  must  negotiate  the  roiling  waters  of  public  debate,  and  Poindexter  reflects 
on  the  difficulty  of  balancing  the  government’s  need  to  know  against  preserving  individual 
privacy — and  how  he  would  have  managed  TIA  differently.  He  also  considers  to  what  extent 
citizens  can  and  should  be  informed  about  the  intelligence  activities  and  tools  that  penetrate 
their  lives.  We  learn  from  Poindexter  that  certain  aspects  of  TIA  in  fact  continue;  they’ve  just 
gone  underground. 


Guide  to  Utility  Computing  By  Christopher  Lindquist  I  54 

FOR  ANY  CEO  OR  CFO  fed  up  with  the  cost,  complexity  and  risk  of  IT,  it’s  an  appealing 
vision:  computer  power  when  and  where  you  need  it,  software  licenses  on  demand,  no  money 
wasted  on  overbuying,  no  users  sitting  idle  because  of  underbuying.  Utility  computing  is  IT 
efficiency  on  a  scale  never  before  experienced.  But  CEOs  being  pitched  and  wooed  by  ven¬ 
dors  or  airline  magazine  articles  should  be  forewarned  about  what  on-demand  computing 
really  is,  and  isn’t.  What’s  the  business  case?  What’s  in  it  for  the  vendors?  How  does  it  differ 
from  outsourcing?  And  will  it  really  reduce  IT  complexity?  Answers  to  these  questions  and 
more  are  spelled  out  in  this  useful  pass-along  article. 


Hot  Seat:  No  More  Secrets  to  CIO  Success  By  Beth  stackpoie  I  64 

A  MASSIVE  STUDY  by  headhunting  firm  Korn/Ferry  International  shows  that  successful 
CIOs  and  CEOs  tend  to  be  quite  similar  in  leadership  behavior — both  are  highly  adaptive  and 
open  to  change  and  are  excellent  collaborators  and  team  players.  But  there  is  one  important  dif¬ 
ference:  Whereas  CEOs  make  decisions  very  quickly,  CIOs  tend  to  evaluate  situations  from  a 
variety  of  perspectives  before  coming  up  with  multiple  solutions. 
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microsystems 

The  Network  is  the  Computer 


MAKE  SOLARIS  OS 
FASTER 
MAKE  LINUX 
FASTER 

MAKE  YOUR  BUSINESS 
FASTER 


Introducing  Sun  Fire-  Servers  Powered  by 
AMD  Opteron  Processors. 

The  Solaris  Operating  System  and  Linux  are  up  to  45%  faster  than  comparable  32-bit 
powered  by  Sun  Fire  V20z  servers  featuring  screaming  AMD  Opteron  processorsJj 

Add  the  Sun  Java  Enterprise  System  -  Sun’s  entire  infrastructure  portfolio  of  sofCJj| 
Sun  Storage  and  Services  to  experience  the  full  Sun  systems  advantage.  EnginePW 
performance  at  compelling  prices. 


2  V20z 
STARTING 
|  LIST  PRICE 

(USD) 


AMD* 


OPTERON  AT 


OPT  FOR  SUN  AND  AMI 
SUN.COM/V20Z 

OR  CALL  800.SU N.0404 


1.  BASED  ON  TESTS  WITH  AMD  OPTERON  VS.  3.2  GHZ  XEON  RUNNING  LINUX,  AMD  OPTERON  RAN  45%  FASTER  ON  SPECWEB  99SSL  -  BASED  ON  PUBLISHED  DATA  FROM  WWW.SPEC.ORG  1/22/04.  FOR  SOLARIS. 
OS  MICROBENCHMARKS  PERFORMED  AN  AVERAGE  42%  FASTER  ON  AN  AMD  OPTERON  PROCESSOR  MODEL  246  (2.0  GHZ)  BASED  SYSTEM  COMPARED  TO  A  3.2  GHZ  XEON  SYSTEM.  2.  PRICING  IS  U.S.  LIST  PRICE. 
ALL  PRICES  QUOTED  ARE  IN  U.S.  DOLLARS.  ■  TOLL-FREE  NUMBER  AVAILABLE  IN  THE  UNITED  STATES,  CANADA  AND  INTERNATIONAL  AMERICAS  ONLY. 

c  2004  SUN  MICROSYSTEMS,  INC.  ALL  RIGHTS  RESERVED.  SUN,  SUN  MICROSYSTEMS.  THE  SUN  LOGO.  SOLARIS.  THE  SOLARIS  LOGO,  JAVA.  THE  JAVA  LOGO.  SUN  FIRE  AND  THE  NETWORK  IS  THE  COMPUTER 
ARE  TRADEMARKS  OR  REGISTERED  TRADEMARKS  OF  SUN  MICROSYSTEMS,  INC.  IN  THE  UNITED  STATES  AND  OTHER  COUNTRIES.  AMD,  THE  AMD  ARROW  LOGO,  AMD  OPTERON  AND  COMBINATIONS  THEREOF, 
ARE  TRADEMARKS  OF  ADVANCED  MICRO  DEVICES,  INC. 


THE  NEW  UTILITY. 

Ready  to  move  to  Utility  Computing?  We  have  the  building  blocks.  Start  with  storage  for  better  availability  and 
performance.  You  can  reduce  your  hardware  costs,  regardless  of  vendor.  Software  for  Utility  Computing,  veritas.com 
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